00140)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "5f8c7445dbcb5d0ffe63c40f309c5e4fef147369e06e69041bc926028cac3e4a"}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x40}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0xc0c0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r1, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x48}}, 0x80080) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r1, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x3}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xae}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20004895) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r1, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CCA_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair(0x1f, 0x3, 0x5, &(0x7f0000000c00)) syz_genetlink_get_family_id$batadv(&(0x7f0000000c80)='batadv\x00', 0xffffffffffffffff) 07:34:47 executing program 1: sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x20000040) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "5f8c7445dbcb5d0ffe63c40f309c5e4fef147369e06e69041bc926028cac3e4a"}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x40}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0xc0c0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r1, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x48}}, 0x80080) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r1, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x3}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xae}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20004895) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r1, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CCA_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair(0x1f, 0x3, 0x5, &(0x7f0000000c00)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r3, 0x100, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20004001) 07:34:47 executing program 2: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x8, 0x2}, 0x0, 0xfffffff8, 0x5, {0x4, 0x9}, 0x82, 0x5}) sched_setattr(0xffffffffffffffff, &(0x7f0000000140)={0x38, 0x0, 0x1000002a, 0x68, 0x1, 0x2, 0x7, 0x4, 0x2, 0xfffffffc}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xc000, 0xfffff000}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@loopback, @in=@dev}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) 07:34:47 executing program 0: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80cdc3c63e68c79e895dc79add33914f663dd32c0e747ce0b5d48c1f732ad47f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b23ab60fe4991def7378bf2b205f346"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x164}}, 0x80) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002140)={{{@in6=@dev, @in6=@mcast1}}, {{@in=@private}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000002240)=0xe8) 07:34:47 executing program 2: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x8, 0x2}, 0x0, 0xfffffff8, 0x5, {0x4, 0x9}, 0x82, 0x5}) sched_setattr(0xffffffffffffffff, &(0x7f0000000140)={0x38, 0x0, 0x1000002a, 0x68, 0x1, 0x2, 0x7, 0x4, 0x2, 0xfffffffc}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xc000, 0xfffff000}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) 07:34:47 executing program 5: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80cdc3c63e68c79e895dc79add33914f663dd32c0e747ce0b5d48c1f732ad47f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b23ab60fe4991def7378bf2b205f346"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x164}}, 0x80) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1fd0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffff00}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200008c4}, 0x44800) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xf}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x81}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4840) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0)='batadv\x00', 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002140)={{{@in6=@dev, @in6=@mcast1}}, {{@in=@private}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000002240)=0xe8) 07:34:47 executing program 3: sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x20000040) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "5f8c7445dbcb5d0ffe63c40f309c5e4fef147369e06e69041bc926028cac3e4a"}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x40}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0xc0c0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r1, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x48}}, 0x80080) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r1, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x3}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xae}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20004895) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r1, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CCA_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair(0x1f, 0x3, 0x5, &(0x7f0000000c00)) 07:34:47 executing program 1: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80cdc3c63e68c79e895dc79add33914f663dd32c0e747ce0b5d48c1f732ad47f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b23ab60fe4991def7378bf2b205f346"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x164}}, 0x80) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1fd0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffff00}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200008c4}, 0x44800) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xf}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x81}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4840) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0)='batadv\x00', 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002140)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000002240)=0xe8) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x3c, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffff83}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0xc5) 07:34:47 executing program 0: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80cdc3c63e68c79e895dc79add33914f663dd32c0e747ce0b5d48c1f732ad47f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b23ab60fe4991def7378bf2b205f346"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x164}}, 0x80) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002140)={{{@in6=@dev, @in6=@mcast1}}, {{@in=@private}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000002240)=0xe8) 07:34:48 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x8, 0x2}, 0x0, 0xfffffff8, 0x5, {0x4, 0x9}, 0x82, 0x5}) sched_setattr(0xffffffffffffffff, &(0x7f0000000140)={0x38, 0x0, 0x1000002a, 0x68, 0x1, 0x2, 0x7, 0x4, 0x2, 0xfffffffc}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xc000, 0xfffff000}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@loopback, @in=@dev}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000300)={{0x9, 0x1f}, {0x0, 0x3}, 0x5, 0x4, 0x3}) r1 = memfd_create(&(0x7f0000000380)=']/]%}\x00', 0x1) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000003c0)={r1, 0x1, 0x8000, 0xfffffffff0000000}) exit(0x0) 07:34:48 executing program 2: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x8, 0x2}, 0x0, 0xfffffff8, 0x5, {0x4, 0x9}, 0x82, 0x5}) sched_setattr(0xffffffffffffffff, &(0x7f0000000140)={0x38, 0x0, 0x1000002a, 0x68, 0x1, 0x2, 0x7, 0x4, 0x2, 0xfffffffc}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) 07:34:48 executing program 3: sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x20000040) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "5f8c7445dbcb5d0ffe63c40f309c5e4fef147369e06e69041bc926028cac3e4a"}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x40}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0xc0c0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r1, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x48}}, 0x80080) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r1, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x3}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xae}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20004895) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) socketpair(0x1f, 0x3, 0x5, &(0x7f0000000c00)) 07:34:48 executing program 5: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80cdc3c63e68c79e895dc79add33914f663dd32c0e747ce0b5d48c1f732ad47f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b23ab60fe4991def7378bf2b205f346"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x164}}, 0x80) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1fd0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffff00}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200008c4}, 0x44800) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xf}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x81}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4840) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0)='batadv\x00', 0xffffffffffffffff) 07:34:48 executing program 1: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80cdc3c63e68c79e895dc79add33914f663dd32c0e747ce0b5d48c1f732ad47f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b23ab60fe4991def7378bf2b205f346"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x164}}, 0x80) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1fd0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffff00}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200008c4}, 0x44800) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xf}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x81}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4840) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0)='batadv\x00', 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002140)={{{@in6=@dev, @in6=@mcast1}}, {{@in=@private}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000002240)=0xe8) 07:34:48 executing program 0: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80cdc3c63e68c79e895dc79add33914f663dd32c0e747ce0b5d48c1f732ad47f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b23ab60fe4991def7378bf2b205f346"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x164}}, 0x80) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00', r0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002140)={{{@in6=@dev, @in6=@mcast1}}, {{@in=@private}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000002240)=0xe8) 07:34:48 executing program 3: sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x20000040) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "5f8c7445dbcb5d0ffe63c40f309c5e4fef147369e06e69041bc926028cac3e4a"}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x40}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0xc0c0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r1, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x48}}, 0x80080) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r1, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x3}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xae}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20004895) socketpair(0x1f, 0x3, 0x5, &(0x7f0000000c00)) 07:34:48 executing program 2: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x8, 0x2}, 0x0, 0xfffffff8, 0x5, {0x4, 0x9}, 0x82, 0x5}) sched_setattr(0xffffffffffffffff, &(0x7f0000000140)={0x38, 0x0, 0x1000002a, 0x68, 0x1, 0x2, 0x7, 0x4, 0x2, 0xfffffffc}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) 07:34:48 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x8, 0x2}, 0x0, 0xfffffff8, 0x5, {0x4, 0x9}, 0x82, 0x5}) sched_setattr(0xffffffffffffffff, &(0x7f0000000140)={0x38, 0x0, 0x1000002a, 0x68, 0x1, 0x2, 0x7, 0x4, 0x2, 0xfffffffc}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) 07:34:48 executing program 0: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80cdc3c63e68c79e895dc79add33914f663dd32c0e747ce0b5d48c1f732ad47f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b23ab60fe4991def7378bf2b205f346"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x164}}, 0x80) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002140)={{{@in6=@dev, @in6=@mcast1}}, {{@in=@private}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000002240)=0xe8) 07:34:48 executing program 5: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80cdc3c63e68c79e895dc79add33914f663dd32c0e747ce0b5d48c1f732ad47f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b23ab60fe4991def7378bf2b205f346"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x164}}, 0x80) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1fd0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffff00}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200008c4}, 0x44800) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xf}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x81}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4840) 07:34:48 executing program 2: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x8, 0x2}, 0x0, 0xfffffff8, 0x5, {0x4, 0x9}, 0x82, 0x5}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) 07:34:49 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x8, 0x2}, 0x0, 0xfffffff8, 0x5, {0x4, 0x9}, 0x82, 0x5}) sched_setattr(0xffffffffffffffff, &(0x7f0000000140)={0x38, 0x0, 0x1000002a, 0x68, 0x1, 0x2, 0x7, 0x4, 0x2, 0xfffffffc}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xc000, 0xfffff000}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@loopback, @in=@dev}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000300)={{0x9, 0x1f}, {0x0, 0x3}, 0x5, 0x4, 0x3}) memfd_create(&(0x7f0000000380)=']/]%}\x00', 0x1) exit(0x0) 07:34:49 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x8, 0x2}, 0x0, 0xfffffff8, 0x5, {0x4, 0x9}, 0x82, 0x5}) sched_setattr(0xffffffffffffffff, &(0x7f0000000140)={0x38, 0x0, 0x1000002a, 0x68, 0x1, 0x2, 0x7, 0x4, 0x2, 0xfffffffc}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) 07:34:49 executing program 3: sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x20000040) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "5f8c7445dbcb5d0ffe63c40f309c5e4fef147369e06e69041bc926028cac3e4a"}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x40}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0xc0c0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r1, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x48}}, 0x80080) socketpair(0x1f, 0x3, 0x5, &(0x7f0000000c00)) 07:34:49 executing program 5: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80cdc3c63e68c79e895dc79add33914f663dd32c0e747ce0b5d48c1f732ad47f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b23ab60fe4991def7378bf2b205f346"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x164}}, 0x80) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1fd0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffff00}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200008c4}, 0x44800) 07:34:49 executing program 0: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002140)={{{@in6=@dev, @in6=@mcast1}}, {{@in=@private}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000002240)=0xe8) 07:34:49 executing program 2: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) 07:34:49 executing program 3: sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x20000040) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "5f8c7445dbcb5d0ffe63c40f309c5e4fef147369e06e69041bc926028cac3e4a"}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x40}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0xc0c0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280)='802.15.4 MAC\x00', 0xffffffffffffffff) socketpair(0x1f, 0x3, 0x5, &(0x7f0000000c00)) 07:34:49 executing program 2: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) 07:34:49 executing program 0: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002140)={{{@in6=@dev, @in6=@mcast1}}, {{@in=@private}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000002240)=0xe8) 07:34:49 executing program 5: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80cdc3c63e68c79e895dc79add33914f663dd32c0e747ce0b5d48c1f732ad47f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b23ab60fe4991def7378bf2b205f346"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x164}}, 0x80) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) syz_genetlink_get_family_id$batadv(&(0x7f0000000980)='batadv\x00', 0xffffffffffffffff) 07:34:49 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x8, 0x2}, 0x0, 0xfffffff8, 0x5, {0x4, 0x9}, 0x82, 0x5}) sched_setattr(0xffffffffffffffff, &(0x7f0000000140)={0x38, 0x0, 0x1000002a, 0x68, 0x1, 0x2, 0x7, 0x4, 0x2, 0xfffffffc}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) 07:34:49 executing program 3: sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x20000040) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "5f8c7445dbcb5d0ffe63c40f309c5e4fef147369e06e69041bc926028cac3e4a"}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x40}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0xc0c0) socketpair(0x1f, 0x3, 0x5, &(0x7f0000000c00)) 07:34:50 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x8, 0x2}, 0x0, 0xfffffff8, 0x5, {0x4, 0x9}, 0x82, 0x5}) sched_setattr(0xffffffffffffffff, &(0x7f0000000140)={0x38, 0x0, 0x1000002a, 0x68, 0x1, 0x2, 0x7, 0x4, 0x2, 0xfffffffc}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xc000, 0xfffff000}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@loopback, @in=@dev}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000300)={{0x9, 0x1f}, {0x0, 0x3}, 0x5, 0x4, 0x3}) exit(0x0) 07:34:50 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) 07:34:50 executing program 0: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002140)={{{@in6=@dev, @in6=@mcast1}}, {{@in=@private}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000002240)=0xe8) 07:34:50 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x8, 0x2}, 0x0, 0xfffffff8, 0x5, {0x4, 0x9}, 0x82, 0x5}) sched_setattr(0xffffffffffffffff, &(0x7f0000000140)={0x38, 0x0, 0x1000002a, 0x68, 0x1, 0x2, 0x7, 0x4, 0x2, 0xfffffffc}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) 07:34:50 executing program 3: sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x20000040) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140)='802.15.4 MAC\x00', 0xffffffffffffffff) socketpair(0x1f, 0x3, 0x5, &(0x7f0000000c00)) 07:34:50 executing program 5: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80cdc3c63e68c79e895dc79add33914f663dd32c0e747ce0b5d48c1f732ad47f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b23ab60fe4991def7378bf2b205f346"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x164}}, 0x80) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) 07:34:50 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x8, 0x2}, 0x0, 0xfffffff8, 0x5, {0x4, 0x9}, 0x82, 0x5}) sched_setattr(0xffffffffffffffff, &(0x7f0000000140)={0x38, 0x0, 0x1000002a, 0x68, 0x1, 0x2, 0x7, 0x4, 0x2, 0xfffffffc}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) 07:34:50 executing program 0: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002140)={{{@in6=@dev, @in6=@mcast1}}, {{@in=@private}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000002240)=0xe8) 07:34:50 executing program 3: sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x20000040) socketpair(0x1f, 0x3, 0x5, &(0x7f0000000c00)) 07:34:50 executing program 5: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80cdc3c63e68c79e895dc79add33914f663dd32c0e747ce0b5d48c1f732ad47f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b23ab60fe4991def7378bf2b205f346"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x164}}, 0x80) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) 07:34:50 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) 07:34:50 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x8, 0x2}, 0x0, 0xfffffff8, 0x5, {0x4, 0x9}, 0x82, 0x5}) sched_setattr(0xffffffffffffffff, &(0x7f0000000140)={0x38, 0x0, 0x1000002a, 0x68, 0x1, 0x2, 0x7, 0x4, 0x2, 0xfffffffc}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) 07:34:50 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x8, 0x2}, 0x0, 0xfffffff8, 0x5, {0x4, 0x9}, 0x82, 0x5}) sched_setattr(0xffffffffffffffff, &(0x7f0000000140)={0x38, 0x0, 0x1000002a, 0x68, 0x1, 0x2, 0x7, 0x4, 0x2, 0xfffffffc}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xc000, 0xfffff000}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@loopback, @in=@dev}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) exit(0x0) 07:34:50 executing program 3: socketpair(0x1f, 0x3, 0x5, &(0x7f0000000c00)) 07:34:50 executing program 0: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002140)={{{@in6=@dev, @in6=@mcast1}}, {{@in=@private}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000002240)=0xe8) 07:34:50 executing program 5: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80cdc3c63e68c79e895dc79add33914f663dd32c0e747ce0b5d48c1f732ad47f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b23ab60fe4991def7378bf2b205f346"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x164}}, 0x80) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) 07:34:50 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) 07:34:50 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x8, 0x2}, 0x0, 0xfffffff8, 0x5, {0x4, 0x9}, 0x82, 0x5}) sched_setattr(0xffffffffffffffff, &(0x7f0000000140)={0x38, 0x0, 0x1000002a, 0x68, 0x1, 0x2, 0x7, 0x4, 0x2, 0xfffffffc}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) 07:34:51 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) 07:34:51 executing program 3: socketpair(0x0, 0x3, 0x5, &(0x7f0000000c00)) 07:34:51 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x8, 0x2}, 0x0, 0xfffffff8, 0x5, {0x4, 0x9}, 0x82, 0x5}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) 07:34:51 executing program 0: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002140)={{{@in6=@dev, @in6=@mcast1}}, {{@in=@private}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000002240)=0xe8) 07:34:51 executing program 5: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80cdc3c63e68c79e895dc79add33914f663dd32c0e747ce0b5d48c1f732ad47f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b23ab60fe4991def7378bf2b205f346"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x164}}, 0x80) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) 07:34:51 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) 07:34:51 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x8, 0x2}, 0x0, 0xfffffff8, 0x5, {0x4, 0x9}, 0x82, 0x5}) sched_setattr(0xffffffffffffffff, &(0x7f0000000140)={0x38, 0x0, 0x1000002a, 0x68, 0x1, 0x2, 0x7, 0x4, 0x2, 0xfffffffc}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xc000, 0xfffff000}) exit(0x0) 07:34:51 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) 07:34:51 executing program 3: socketpair(0x0, 0x3, 0x5, &(0x7f0000000c00)) 07:34:51 executing program 0: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000002240)) 07:34:51 executing program 5: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80cdc3c63e68c79e895dc79add33914f663dd32c0e747ce0b5d48c1f732ad47f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b23ab60fe4991def7378bf2b205f346"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x164}}, 0x80) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) 07:34:51 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) 07:34:52 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) 07:34:52 executing program 5: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80cdc3c63e68c79e895dc79add33914f663dd32c0e747ce0b5d48c1f732ad47f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b23ab60fe4991def7378bf2b205f346"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x164}}, 0x80) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00', r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) 07:34:52 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) 07:34:52 executing program 0: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) 07:34:52 executing program 3: socketpair(0x0, 0x3, 0x5, &(0x7f0000000c00)) 07:34:52 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000000780)) 07:34:52 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x8, 0x2}, 0x0, 0xfffffff8, 0x5, {0x4, 0x9}, 0x82, 0x5}) sched_setattr(0xffffffffffffffff, &(0x7f0000000140)={0x38, 0x0, 0x1000002a, 0x68, 0x1, 0x2, 0x7, 0x4, 0x2, 0xfffffffc}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) exit(0x0) 07:34:52 executing program 0: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80cdc3c63e68c79e895dc79add33914f663dd32c0e747ce0b5d48c1f732ad47f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b23ab60fe4991def7378bf2b205f346"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x164}}, 0x80) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) 07:34:52 executing program 5: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80cdc3c63e68c79e895dc79add33914f663dd32c0e747ce0b5d48c1f732ad47f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b23ab60fe4991def7378bf2b205f346"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x164}}, 0x80) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) 07:34:52 executing program 3: socketpair(0x1f, 0x0, 0x5, &(0x7f0000000c00)) 07:34:52 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) 07:34:52 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 07:34:52 executing program 5: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) 07:34:52 executing program 0: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x8, 0x2}, 0x0, 0xfffffff8, 0x5, {0x4, 0x9}, 0x82, 0x5}) sched_setattr(0xffffffffffffffff, &(0x7f0000000140)={0x38, 0x0, 0x1000002a, 0x68, 0x1, 0x2, 0x7, 0x4, 0x2, 0xfffffffc}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xc000, 0xfffff000}) exit(0x0) 07:34:52 executing program 2: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80cdc3c63e68c79e895dc79add33914f663dd32c0e747ce0b5d48c1f732ad47f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b23ab60fe4991def7378bf2b205f346"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x164}}, 0x80) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) 07:34:52 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) 07:34:53 executing program 3: socketpair(0x1f, 0x0, 0x0, &(0x7f0000000c00)) 07:34:53 executing program 5: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) 07:34:53 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x8, 0x2}, 0x0, 0xfffffff8, 0x5, {0x4, 0x9}, 0x82, 0x5}) sched_setattr(0xffffffffffffffff, &(0x7f0000000140)={0x38, 0x0, 0x1000002a, 0x68, 0x1, 0x2, 0x7, 0x4, 0x2, 0xfffffffc}, 0x0) exit(0x0) 07:34:53 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) 07:34:53 executing program 2: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) 07:34:53 executing program 3: socketpair(0x1f, 0x0, 0x0, 0x0) 07:34:53 executing program 5: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) 07:34:53 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) 07:34:53 executing program 3: socketpair(0x1f, 0x0, 0x0, 0x0) 07:34:53 executing program 0: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002140)={{{@in6=@dev, @in6=@mcast1}}, {{@in=@private}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000002240)=0xe8) 07:34:53 executing program 5: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) 07:34:53 executing program 2: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80cdc3c63e68c79e895dc79add33914f663dd32c0e747ce0b5d48c1f732ad47f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b23ab60fe4991def7378bf2b205f346"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x164}}, 0x80) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) 07:34:54 executing program 3: socketpair(0x1f, 0x0, 0x0, 0x0) 07:34:54 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) 07:34:54 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x8, 0x2}, 0x0, 0xfffffff8, 0x5, {0x4, 0x9}, 0x82, 0x5}) exit(0x0) 07:34:54 executing program 2: sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x20000040) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "5f8c7445dbcb5d0ffe63c40f309c5e4fef147369e06e69041bc926028cac3e4a"}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x40}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0xc0c0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r1, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x48}}, 0x80080) socketpair(0x1f, 0x3, 0x5, &(0x7f0000000c00)) 07:34:54 executing program 5: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) 07:34:54 executing program 0: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002140)={{{@in6=@dev, @in6=@mcast1}}, {{@in=@private}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000002240)=0xe8) 07:34:54 executing program 3: sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x20000040) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "5f8c7445dbcb5d0ffe63c40f309c5e4fef147369e06e69041bc926028cac3e4a"}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x40}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0xc0c0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r1, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x48}}, 0x80080) socketpair(0x1f, 0x3, 0x5, &(0x7f0000000c00)) 07:34:54 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) 07:34:54 executing program 3: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x8, 0x2}, 0x0, 0xfffffff8, 0x5, {0x4, 0x9}, 0x82, 0x5}) sched_setattr(0xffffffffffffffff, &(0x7f0000000140)={0x38, 0x0, 0x1000002a, 0x68, 0x1, 0x2, 0x7, 0x4, 0x2, 0xfffffffc}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xc000, 0xfffff000}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@loopback, @in=@dev}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000300)={{0x9, 0x1f}, {0x0, 0x3}, 0x5, 0x4, 0x3}) r1 = memfd_create(&(0x7f0000000380)=']/]%}\x00', 0x1) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000003c0)={r1, 0x1, 0x8000, 0xfffffffff0000000}) exit(0x0) 07:34:54 executing program 0: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002140)={{{@in6=@dev, @in6=@mcast1}}, {{@in=@private}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000002240)=0xe8) 07:34:54 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) 07:34:54 executing program 2: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80cdc3c63e68c79e895dc79add33914f663dd32c0e747ce0b5d48c1f732ad47f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b23ab60fe4991def7378bf2b205f346"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x164}}, 0x80) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1fd0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffff00}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200008c4}, 0x44800) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xf}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x81}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4840) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0)='batadv\x00', 0xffffffffffffffff) 07:34:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) 07:34:54 executing program 0: sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x20000040) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "5f8c7445dbcb5d0ffe63c40f309c5e4fef147369e06e69041bc926028cac3e4a"}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x40}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0xc0c0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r1, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x48}}, 0x80080) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r1, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x3}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xae}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20004895) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) socketpair(0x1f, 0x3, 0x5, &(0x7f0000000c00)) 07:34:55 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) exit(0x0) 07:34:55 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000000780)) 07:34:55 executing program 2: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x8, 0x2}, 0x0, 0xfffffff8, 0x5, {0x4, 0x9}, 0x82, 0x5}) sched_setattr(0xffffffffffffffff, &(0x7f0000000140)={0x38, 0x0, 0x1000002a, 0x68, 0x1, 0x2, 0x7, 0x4, 0x2, 0xfffffffc}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xc000, 0xfffff000}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@loopback, @in=@dev}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000300)={{0x9, 0x1f}, {0x0, 0x3}, 0x5, 0x4, 0x3}) r1 = memfd_create(&(0x7f0000000380)=']/]%}\x00', 0x1) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000003c0)={r1, 0x1, 0x8000, 0xfffffffff0000000}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/seq\x00', 0x4040) exit(0x0) 07:34:55 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) 07:34:55 executing program 0: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80cdc3c63e68c79e895dc79add33914f663dd32c0e747ce0b5d48c1f732ad47f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b23ab60fe4991def7378bf2b205f346"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x164}}, 0x80) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002140)={{{@in6=@dev, @in6=@mcast1}}, {{@in=@private}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000002240)=0xe8) 07:34:55 executing program 0: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x8, 0x2}, 0x0, 0xfffffff8, 0x5, {0x4, 0x9}, 0x82, 0x5}) exit(0x0) 07:34:55 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000000780)) 07:34:55 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) 07:34:55 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 07:34:55 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) 07:34:55 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) 07:34:55 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x8, 0x2}, 0x0, 0xfffffff8, 0x5, {0x4, 0x9}, 0x82, 0x5}) sched_setattr(0xffffffffffffffff, &(0x7f0000000140)={0x38, 0x0, 0x1000002a, 0x68, 0x1, 0x2, 0x7, 0x4, 0x2, 0xfffffffc}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xc000, 0xfffff000}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@loopback, @in=@dev}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000300)={{0x9, 0x1f}, {0x0, 0x3}, 0x5, 0x4, 0x3}) r1 = memfd_create(&(0x7f0000000380)=']/]%}\x00', 0x1) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000003c0)={r1, 0x1, 0x8000, 0xfffffffff0000000}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/seq\x00', 0x4040) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snd/seq\x00', 0x10000) exit(0x0) 07:34:56 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) exit(0x0) 07:34:56 executing program 3: sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x20000040) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "5f8c7445dbcb5d0ffe63c40f309c5e4fef147369e06e69041bc926028cac3e4a"}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x40}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0xc0c0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r1, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x48}}, 0x80080) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r1, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x3}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xae}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20004895) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r1, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CCA_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair(0x1f, 0x3, 0x5, &(0x7f0000000c00)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r3, 0x100, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20004001) 07:34:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, 0x0, 0x8805) 07:34:56 executing program 2: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80cdc3c63e68c79e895dc79add33914f663dd32c0e747ce0b5d48c1f732ad47f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b23ab60fe4991def7378bf2b205f346"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x164}}, 0x80) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1fd0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffff00}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200008c4}, 0x44800) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xf}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x81}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4840) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0)='batadv\x00', 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002140)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000002240)=0xe8) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x3c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffff83}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0xc5) sendmsg$NL802154_CMD_GET_SEC_KEY(r3, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x5c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x18e0bc09dcc1a1ca}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 07:34:56 executing program 3: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80cdc3c63e68c79e895dc79add33914f663dd32c0e747ce0b5d48c1f732ad47f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b23ab60fe4991def7378bf2b205f346"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x164}}, 0x80) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) syz_genetlink_get_family_id$batadv(&(0x7f0000000980)='batadv\x00', 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002140)={{{@in6=@dev, @in6=@mcast1}}, {{@in=@private}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000002240)=0xe8) 07:34:56 executing program 0: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x8, 0x2}, 0x0, 0xfffffff8, 0x5, {0x4, 0x9}, 0x82, 0x5}) sched_setattr(0xffffffffffffffff, &(0x7f0000000140)={0x38, 0x0, 0x1000002a, 0x68, 0x1, 0x2, 0x7, 0x4, 0x2, 0xfffffffc}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xc000, 0xfffff000}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@loopback, @in=@dev}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000300)={{0x9, 0x1f}, {0x0, 0x3}, 0x5, 0x4, 0x3}) r1 = memfd_create(&(0x7f0000000380)=']/]%}\x00', 0x1) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000003c0)={r1, 0x1, 0x8000, 0xfffffffff0000000}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/seq\x00', 0x4040) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snd/seq\x00', 0x10000) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0xd4, 0x46e1, 0x1, 'queue1\x00', 0x7}) exit(0x0) 07:34:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, 0x0, 0x8805) 07:34:56 executing program 2: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80cdc3c63e68c79e895dc79add33914f663dd32c0e747ce0b5d48c1f732ad47f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b23ab60fe4991def7378bf2b205f346"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x164}}, 0x80) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) syz_genetlink_get_family_id$batadv(&(0x7f0000000980)='batadv\x00', 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002140)={{{@in6=@dev, @in6=@mcast1}}, {{@in=@private}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000002240)=0xe8) 07:34:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, 0x0, 0x8805) 07:34:56 executing program 3: sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x20000040) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "5f8c7445dbcb5d0ffe63c40f309c5e4fef147369e06e69041bc926028cac3e4a"}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x40}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0xc0c0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r1, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x48}}, 0x80080) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r1, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x3}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xae}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20004895) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r1, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CCA_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair(0x1f, 0x3, 0x5, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r4, 0x100, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20004001) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, r0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x3c, r4, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4008041) 07:34:56 executing program 2: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80cdc3c63e68c79e895dc79add33914f663dd32c0e747ce0b5d48c1f732ad47f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b23ab60fe4991def7378bf2b205f346"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x164}}, 0x80) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1fd0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffff00}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200008c4}, 0x44800) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xf}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x81}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4840) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0)='batadv\x00', 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002140)={{{@in6=@dev, @in6=@mcast1}}, {{@in=@private}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000002240)=0xe8) 07:34:56 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x8, 0x2}, 0x0, 0xfffffff8, 0x5, {0x4, 0x9}, 0x82, 0x5}) sched_setattr(0xffffffffffffffff, &(0x7f0000000140)={0x38, 0x0, 0x1000002a, 0x68, 0x1, 0x2, 0x7, 0x4, 0x2, 0xfffffffc}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xc000, 0xfffff000}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@loopback, @in=@dev}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000300)={{0x9, 0x1f}, {0x0, 0x3}, 0x5, 0x4, 0x3}) r1 = memfd_create(&(0x7f0000000380)=']/]%}\x00', 0x1) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000003c0)={r1, 0x1, 0x8000, 0xfffffffff0000000}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/seq\x00', 0x4040) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snd/seq\x00', 0x10000) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000480)={0xd4, 0x46e1, 0x1, 'queue1\x00', 0x7}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) exit(0x0) 07:34:57 executing program 4: exit(0x0) 07:34:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) 07:34:57 executing program 3: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80cdc3c63e68c79e895dc79add33914f663dd32c0e747ce0b5d48c1f732ad47f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b23ab60fe4991def7378bf2b205f346"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x164}}, 0x80) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1fd0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffff00}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200008c4}, 0x44800) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xf}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x81}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4840) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0)='batadv\x00', 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002140)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000002240)=0xe8) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x3c, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffff83}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0xc5) 07:34:57 executing program 2: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80cdc3c63e68c79e895dc79add33914f663dd32c0e747ce0b5d48c1f732ad47f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b23ab60fe4991def7378bf2b205f346"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x164}}, 0x80) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1fd0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffff00}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200008c4}, 0x44800) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xf}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x81}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4840) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0)='batadv\x00', 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002140)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000002240)=0xe8) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x3c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffff83}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0xc5) sendmsg$NL802154_CMD_GET_SEC_KEY(r3, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x5c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x18e0bc09dcc1a1ca}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r7 = syz_open_dev$mouse(&(0x7f00000027c0)='/dev/input/mouse#\x00', 0x10000, 0x82) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f00000028c0)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x1c, r4, 0x300, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x4008010) 07:34:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8805) 07:34:57 executing program 0: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80cdc3c63e68c79e895dc79add33914f663dd32c0e747ce0b5d48c1f732ad47f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b23ab60fe4991def7378bf2b205f346"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x164}}, 0x80) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1fd0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffff00}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200008c4}, 0x44800) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xf}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x81}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4840) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0)='batadv\x00', 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002140)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000002240)=0xe8) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x3c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffff83}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0xc5) sendmsg$NL802154_CMD_GET_SEC_KEY(r3, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x5c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x18e0bc09dcc1a1ca}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r7 = syz_open_dev$mouse(&(0x7f00000027c0)='/dev/input/mouse#\x00', 0x10000, 0x82) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f00000028c0)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x1c, r4, 0x300, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x4008010) 07:34:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8805) 07:34:57 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8805) 07:34:57 executing program 2: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x523}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20048888) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x24008880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80cdc3c63e68c79e895dc79add33914f663dd32c0e747ce0b5d48c1f732ad47f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b23ab60fe4991def7378bf2b205f346"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x164}}, 0x80) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8805) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1fd0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffff00}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200008c4}, 0x44800) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xf}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x81}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4840) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0)='batadv\x00', 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002140)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000002240)=0xe8) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x3c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffff83}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0xc5) sendmsg$NL802154_CMD_GET_SEC_KEY(r3, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x5c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x18e0bc09dcc1a1ca}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r7 = syz_open_dev$mouse(&(0x7f00000027c0)='/dev/input/mouse#\x00', 0x10000, 0x82) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f00000028c0)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x1c, r4, 0x300, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x4008010) 07:34:57 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) 07:34:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8805) 07:34:57 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) 07:34:58 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00'}) 07:34:58 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) 07:34:58 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) 07:34:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x8805) 07:34:58 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) 07:34:58 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00'}) 07:34:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x8805) 07:34:58 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00'}) 07:34:58 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00'}) 07:34:58 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) 07:34:58 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00'}) 07:34:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) 07:34:58 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00'}) 07:34:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) 07:34:59 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00'}) 07:34:59 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00'}) 07:34:59 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00'}) 07:34:59 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00'}) 07:34:59 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00'}) 07:34:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) 07:34:59 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00'}) 07:34:59 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00'}) 07:34:59 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00'}) 07:34:59 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00'}) 07:34:59 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00'}) 07:34:59 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00'}) 07:34:59 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00'}) 07:34:59 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00'}) 07:34:59 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) 07:34:59 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) 07:35:00 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00'}) 07:35:00 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00'}) 07:35:00 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00'}) 07:35:00 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) 07:35:00 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) 07:35:00 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00'}) 07:35:00 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) 07:35:00 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) 07:35:00 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00'}) 07:35:00 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00'}) 07:35:00 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00'}) 07:35:00 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00'}) 07:35:00 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 07:35:00 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 07:35:00 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00'}) 07:35:00 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) 07:35:00 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00'}) 07:35:00 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00'}) 07:35:00 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 07:35:00 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 07:35:01 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00'}) 07:35:01 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 07:35:01 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) 07:35:01 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) 07:35:01 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00'}) 07:35:01 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00'}) 07:35:01 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 07:35:01 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 07:35:01 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) 07:35:01 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) 07:35:01 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) 07:35:01 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 07:35:01 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) 07:35:01 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00'}) 07:35:01 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 07:35:01 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) 07:35:01 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) 07:35:01 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 07:35:01 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) 07:35:01 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00'}) 07:35:01 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) 07:35:01 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) 07:35:02 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) 07:35:02 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) 07:35:02 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) 07:35:02 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 07:35:02 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 07:35:02 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) 07:35:02 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) 07:35:02 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) 07:35:02 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) 07:35:02 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) 07:35:02 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) 07:35:02 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 07:35:02 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) 07:35:02 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) 07:35:02 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) 07:35:02 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) 07:35:02 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) 07:35:02 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) 07:35:02 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) 07:35:02 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) 07:35:02 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) 07:35:02 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) 07:35:02 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) 07:35:02 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) 07:35:02 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) 07:35:02 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) 07:35:03 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) 07:35:03 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) 07:35:03 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) 07:35:03 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) 07:35:03 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) 07:35:03 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) 07:35:03 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) 07:35:03 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) 07:35:03 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000340), 0x10) 07:35:03 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) 07:35:03 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) 07:35:03 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) 07:35:03 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) 07:35:03 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) 07:35:03 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) 07:35:03 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000340), 0x10) 07:35:03 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) 07:35:03 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) 07:35:03 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) 07:35:03 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) 07:35:03 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000340), 0x10) 07:35:03 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) 07:35:03 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) 07:35:03 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) 07:35:03 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) 07:35:03 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) 07:35:04 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000340), 0x10) 07:35:04 executing program 4: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) 07:35:04 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) 07:35:04 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff}) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) 07:35:04 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) 07:35:04 executing program 2: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) 07:35:04 executing program 0: prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) 07:35:04 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000340), 0x10) 07:35:04 executing program 4: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) 07:35:04 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) 07:35:04 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) 07:35:04 executing program 2: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x824) 07:35:04 executing program 0: prctl$PR_GET_FPEMU(0x9, 0x0) 07:35:04 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000340), 0x10) 07:35:04 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) 07:35:04 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) 07:35:04 executing program 2: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x0) 07:35:04 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000340), 0x10) 07:35:04 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) 07:35:04 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000340), 0x10) 07:35:04 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) 07:35:04 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) 07:35:04 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) 07:35:04 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000340), 0x10) 07:35:04 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) 07:35:04 executing program 1: bind$can_raw(0xffffffffffffffff, &(0x7f0000000340), 0x10) 07:35:04 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) 07:35:04 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) 07:35:05 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) 07:35:05 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) 07:35:05 executing program 1: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) 07:35:05 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) 07:35:05 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) 07:35:05 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) 07:35:05 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) 07:35:05 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) 07:35:05 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) 07:35:05 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) 07:35:05 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) 07:35:05 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) 07:35:05 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) 07:35:05 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) 07:35:05 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) 07:35:05 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) 07:35:05 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff}) socket$kcm(0x29, 0x2, 0x0) 07:35:05 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) 07:35:05 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) 07:35:05 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) 07:35:05 executing program 0: socket$kcm(0x29, 0x2, 0x0) 07:35:05 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) 07:35:05 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) 07:35:05 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff}) socket$kcm(0x29, 0x2, 0x0) 07:35:05 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) 07:35:05 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) 07:35:05 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) 07:35:05 executing program 0: socket$kcm(0x29, 0x2, 0x0) 07:35:06 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) 07:35:06 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff}) socket$kcm(0x29, 0x2, 0x0) 07:35:06 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) 07:35:06 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) 07:35:06 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) 07:35:06 executing program 0: socket$kcm(0x29, 0x0, 0x0) 07:35:06 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 07:35:06 executing program 3: socket$kcm(0x29, 0x2, 0x0) 07:35:06 executing program 0: socket$kcm(0x29, 0x0, 0x0) 07:35:06 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) 07:35:06 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) 07:35:06 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff}) socket$kcm(0x29, 0x2, 0x0) 07:35:06 executing program 3: socket$kcm(0x29, 0x0, 0x0) 07:35:06 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 07:35:06 executing program 0: socket$kcm(0x29, 0x0, 0x0) 07:35:06 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) 07:35:06 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff}) socket$kcm(0x29, 0x2, 0x0) 07:35:06 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff}) socket$kcm(0x29, 0x2, 0x0) 07:35:06 executing program 3: socket$kcm(0x29, 0x0, 0x0) 07:35:06 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) 07:35:06 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff}) socket$kcm(0x29, 0x2, 0x0) 07:35:06 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) 07:35:06 executing program 4: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff}) socket$kcm(0x29, 0x2, 0x0) 07:35:06 executing program 5: socket$kcm(0x29, 0x2, 0x0) 07:35:06 executing program 3: socket$kcm(0x29, 0x0, 0x0) 07:35:06 executing program 1: socket$kcm(0x29, 0x2, 0x0) 07:35:06 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 07:35:07 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00'}) 07:35:07 executing program 5: socket$kcm(0x29, 0x0, 0x0) 07:35:07 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) 07:35:07 executing program 4: socket$kcm(0x29, 0x2, 0x0) 07:35:07 executing program 1: socket$kcm(0x29, 0x0, 0x0) 07:35:07 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00'}) 07:35:07 executing program 5: socket$kcm(0x29, 0x0, 0x0) 07:35:07 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00'}) 07:35:07 executing program 4: socket$kcm(0x29, 0x0, 0x0) 07:35:07 executing program 1: socket$kcm(0x29, 0x0, 0x0) 07:35:07 executing program 4: socket$kcm(0x29, 0x0, 0x0) 07:35:07 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) 07:35:07 executing program 5: socket$kcm(0x29, 0x0, 0x0) 07:35:07 executing program 0: socket$kcm(0x29, 0x0, 0x0) 07:35:07 executing program 1: socket$kcm(0x29, 0x0, 0x0) 07:35:07 executing program 4: socket$kcm(0x29, 0x0, 0x0) 07:35:07 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) 07:35:07 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) 07:35:07 executing program 0: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00'}) 07:35:07 executing program 4 (fault-call:0 fault-nth:0): socket$kcm(0x29, 0x2, 0x0) 07:35:07 executing program 1 (fault-call:0 fault-nth:0): socket$kcm(0x29, 0x2, 0x0) 07:35:07 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x401, 0x1, 0x4, 0xe000, 0x100, {0x77359400}, {0x3, 0x2, 0x5, 0x20, 0x20, 0xc3, "625f20b8"}, 0x3, 0x0, @planes=&(0x7f0000000000)={0xea62, 0xf83, @mem_offset=0x1, 0x2}, 0xffff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x6, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0xc, 0x3, 0x1f, 0x9, 0xf7, "4500b180"}, 0x20, 0x4, @offset=0x1, 0xffffffff, 0x0, r0}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x8000, 0x6, 0x4, 0x2748a78b26730f07, 0x1ff, {0x77359400}, {0x3, 0x1, 0xc1, 0x5a, 0x2, 0x29, "f254c276"}, 0x1f, 0x4, @offset=0x7, 0xac, 0x0, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1000, 0x0, {0x77359400}, {0x5, 0x0, 0xf9, 0x40, 0x1, 0x7, "ba963899"}, 0x4, 0x1, @planes=&(0x7f0000000240)={0x80, 0x0, @mem_offset=0x24, 0x5}, 0xe35a, 0x0, r1}) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x200) bind$can_raw(r4, &(0x7f0000000340), 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x6, 0x9, 0x0, 'queue0\x00', 0x50000000}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7d}]}, 0x48}, 0x1, 0x0, 0x0, 0x400a1}, 0x824) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000005c0)={0x3, 0x100, 0x7, 0x5, 0x7, 0x1fe}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/73, 0x49}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x804) [ 278.708446][T20006] FAULT_INJECTION: forcing a failure. [ 278.708446][T20006] name failslab, interval 1, probability 0, space 0, times 1 [ 278.725103][T20009] FAULT_INJECTION: forcing a failure. [ 278.725103][T20009] name failslab, interval 1, probability 0, space 0, times 1 07:35:07 executing program 2 (fault-call:0 fault-nth:0): socket$kcm(0x29, 0x2, 0x0) [ 278.801533][T20006] CPU: 0 PID: 20006 Comm: syz-executor.4 Not tainted 5.12.0-rc1-next-20210304-syzkaller #0 [ 278.811571][T20006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.821644][T20006] Call Trace: [ 278.824948][T20006] dump_stack+0xfa/0x151 [ 278.829338][T20006] should_fail.cold+0x5/0xa [ 278.833966][T20006] ? sock_alloc_inode+0x18/0x1c0 [ 278.839006][T20006] should_failslab+0x5/0x10 [ 278.843586][T20006] kmem_cache_alloc+0x5e/0x380 [ 278.848431][T20006] ? sock_free_inode+0x20/0x20 [ 278.853223][T20006] sock_alloc_inode+0x18/0x1c0 [ 278.858008][T20006] ? sock_free_inode+0x20/0x20 [ 278.862819][T20006] alloc_inode+0x61/0x230 [ 278.867207][T20006] new_inode_pseudo+0x14/0xe0 [ 278.871909][T20006] sock_alloc+0x3c/0x260 [ 278.876177][T20006] __sock_create+0xb9/0x780 [ 278.880707][T20006] ? wait_for_completion_io+0x270/0x270 [ 278.886355][T20006] __sys_socket+0xef/0x200 [ 278.890801][T20006] ? move_addr_to_kernel+0x70/0x70 [ 278.895954][T20006] __x64_sys_socket+0x6f/0xb0 [ 278.900649][T20006] ? syscall_enter_from_user_mode+0x1d/0x50 [ 278.906569][T20006] do_syscall_64+0x2d/0x70 [ 278.911089][T20006] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 278.917000][T20006] RIP: 0033:0x465ef9 [ 278.920915][T20006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 278.940575][T20006] RSP: 002b:00007fc30b56d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 278.949051][T20006] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 278.957061][T20006] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 278.965139][T20006] RBP: 00007fc30b56d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 278.973135][T20006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.981215][T20006] R13: 00007ffe0280426f R14: 00007fc30b56d300 R15: 0000000000022000 [ 279.002014][T20009] CPU: 1 PID: 20009 Comm: syz-executor.1 Not tainted 5.12.0-rc1-next-20210304-syzkaller #0 [ 279.012050][T20009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 279.022126][T20009] Call Trace: [ 279.025424][T20009] dump_stack+0xfa/0x151 [ 279.029701][T20009] should_fail.cold+0x5/0xa [ 279.033995][T20006] socket: no more sockets [ 279.034219][T20009] ? sock_alloc_inode+0x18/0x1c0 [ 279.043691][T20009] should_failslab+0x5/0x10 [ 279.048218][T20009] kmem_cache_alloc+0x5e/0x380 [ 279.053008][T20009] ? sock_free_inode+0x20/0x20 [ 279.057801][T20009] sock_alloc_inode+0x18/0x1c0 [ 279.062590][T20009] ? sock_free_inode+0x20/0x20 [ 279.067377][T20009] alloc_inode+0x61/0x230 [ 279.071731][T20009] new_inode_pseudo+0x14/0xe0 [ 279.076429][T20009] sock_alloc+0x3c/0x260 [ 279.080700][T20009] __sock_create+0xb9/0x780 [ 279.085251][T20009] ? wait_for_completion_io+0x270/0x270 [ 279.090844][T20009] __sys_socket+0xef/0x200 [ 279.095292][T20009] ? move_addr_to_kernel+0x70/0x70 [ 279.100438][T20009] __x64_sys_socket+0x6f/0xb0 [ 279.105138][T20009] ? syscall_enter_from_user_mode+0x1d/0x50 [ 279.111050][T20009] do_syscall_64+0x2d/0x70 [ 279.115489][T20009] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 279.121403][T20009] RIP: 0033:0x465ef9 [ 279.125310][T20009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 07:35:08 executing program 5 (fault-call:0 fault-nth:0): socket$kcm(0x29, 0x2, 0x0) 07:35:08 executing program 4 (fault-call:0 fault-nth:1): socket$kcm(0x29, 0x2, 0x0) [ 279.145036][T20009] RSP: 002b:00007fa9d1ae5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 279.153479][T20009] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 279.161472][T20009] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 279.169463][T20009] RBP: 00007fa9d1ae51d0 R08: 0000000000000000 R09: 0000000000000000 [ 279.177455][T20009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.185445][T20009] R13: 00007ffd6c029d2f R14: 00007fa9d1ae5300 R15: 0000000000022000 [ 279.287790][T20026] FAULT_INJECTION: forcing a failure. [ 279.287790][T20026] name failslab, interval 1, probability 0, space 0, times 0 [ 279.327701][T20029] FAULT_INJECTION: forcing a failure. 07:35:08 executing program 3 (fault-call:0 fault-nth:0): socket$kcm(0x29, 0x2, 0x0) 07:35:08 executing program 0 (fault-call:0 fault-nth:0): bind$can_raw(0xffffffffffffffff, 0x0, 0x0) [ 279.327701][T20029] name failslab, interval 1, probability 0, space 0, times 0 [ 279.336383][T20030] FAULT_INJECTION: forcing a failure. [ 279.336383][T20030] name failslab, interval 1, probability 0, space 0, times 0 [ 279.375730][T20026] CPU: 0 PID: 20026 Comm: syz-executor.2 Not tainted 5.12.0-rc1-next-20210304-syzkaller #0 [ 279.385767][T20026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 279.395836][T20026] Call Trace: [ 279.399131][T20026] dump_stack+0xfa/0x151 [ 279.406529][T20026] should_fail.cold+0x5/0xa [ 279.411055][T20026] ? sock_alloc_inode+0x18/0x1c0 [ 279.416019][T20026] should_failslab+0x5/0x10 [ 279.420547][T20026] kmem_cache_alloc+0x5e/0x380 [ 279.425334][T20026] ? sock_free_inode+0x20/0x20 [ 279.430128][T20026] sock_alloc_inode+0x18/0x1c0 [ 279.434909][T20026] ? sock_free_inode+0x20/0x20 [ 279.439679][T20026] alloc_inode+0x61/0x230 [ 279.444016][T20026] new_inode_pseudo+0x14/0xe0 [ 279.448696][T20026] sock_alloc+0x3c/0x260 [ 279.452953][T20026] __sock_create+0xb9/0x780 [ 279.457475][T20026] ? wait_for_completion_io+0x270/0x270 [ 279.463050][T20026] __sys_socket+0xef/0x200 [ 279.467581][T20026] ? move_addr_to_kernel+0x70/0x70 [ 279.472736][T20026] __x64_sys_socket+0x6f/0xb0 [ 279.477436][T20026] ? syscall_enter_from_user_mode+0x1d/0x50 [ 279.483355][T20026] do_syscall_64+0x2d/0x70 [ 279.487802][T20026] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 279.493716][T20026] RIP: 0033:0x465ef9 [ 279.497622][T20026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 279.517251][T20026] RSP: 002b:00007f28f44ea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 279.525688][T20026] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 279.533678][T20026] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 279.541666][T20026] RBP: 00007f28f44ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 279.549657][T20026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.557645][T20026] R13: 00007fffbcc9740f R14: 00007f28f44ea300 R15: 0000000000022000 [ 279.578972][T20029] CPU: 1 PID: 20029 Comm: syz-executor.5 Not tainted 5.12.0-rc1-next-20210304-syzkaller #0 [ 279.589041][T20029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 279.599098][T20029] Call Trace: [ 279.602384][T20029] dump_stack+0xfa/0x151 [ 279.606634][T20029] should_fail.cold+0x5/0xa [ 279.611142][T20029] ? sock_alloc_inode+0x18/0x1c0 [ 279.616079][T20029] should_failslab+0x5/0x10 [ 279.620582][T20029] kmem_cache_alloc+0x5e/0x380 [ 279.625351][T20029] ? sock_free_inode+0x20/0x20 [ 279.630126][T20029] sock_alloc_inode+0x18/0x1c0 [ 279.634887][T20029] ? sock_free_inode+0x20/0x20 [ 279.639648][T20029] alloc_inode+0x61/0x230 [ 279.643979][T20029] new_inode_pseudo+0x14/0xe0 [ 279.648675][T20029] sock_alloc+0x3c/0x260 [ 279.652928][T20029] __sock_create+0xb9/0x780 [ 279.657428][T20029] ? wait_for_completion_io+0x270/0x270 [ 279.662994][T20029] __sys_socket+0xef/0x200 [ 279.667428][T20029] ? move_addr_to_kernel+0x70/0x70 [ 279.672553][T20029] __x64_sys_socket+0x6f/0xb0 [ 279.677228][T20029] ? syscall_enter_from_user_mode+0x1d/0x50 [ 279.683120][T20029] do_syscall_64+0x2d/0x70 [ 279.687535][T20029] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 279.693426][T20029] RIP: 0033:0x465ef9 [ 279.697313][T20029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 279.716913][T20029] RSP: 002b:00007fa0ee83e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 279.725321][T20029] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 279.733459][T20029] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 279.741422][T20029] RBP: 00007fa0ee83e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 279.749384][T20029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.757345][T20029] R13: 00007ffe5eccbedf R14: 00007fa0ee83e300 R15: 0000000000022000 [ 279.765341][T20030] CPU: 0 PID: 20030 Comm: syz-executor.4 Not tainted 5.12.0-rc1-next-20210304-syzkaller #0 [ 279.775343][T20030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 279.785422][T20030] Call Trace: [ 279.788714][T20030] dump_stack+0xfa/0x151 [ 279.792987][T20030] should_fail.cold+0x5/0xa [ 279.797519][T20030] ? security_inode_alloc+0x34/0x160 [ 279.802917][T20030] should_failslab+0x5/0x10 [ 279.807443][T20030] kmem_cache_alloc+0x5e/0x380 [ 279.812238][T20030] security_inode_alloc+0x34/0x160 [ 279.817379][T20030] inode_init_always+0x5d8/0xd60 [ 279.822404][T20030] ? __init_waitqueue_head+0x6b/0xd0 [ 279.827774][T20030] alloc_inode+0x82/0x230 [ 279.832136][T20030] new_inode_pseudo+0x14/0xe0 [ 279.836841][T20030] sock_alloc+0x3c/0x260 [ 279.841113][T20030] __sock_create+0xb9/0x780 [ 279.845639][T20030] ? wait_for_completion_io+0x270/0x270 [ 279.851215][T20030] __sys_socket+0xef/0x200 [ 279.855658][T20030] ? move_addr_to_kernel+0x70/0x70 [ 279.860803][T20030] __x64_sys_socket+0x6f/0xb0 [ 279.865502][T20030] ? syscall_enter_from_user_mode+0x1d/0x50 [ 279.871416][T20030] do_syscall_64+0x2d/0x70 [ 279.875859][T20030] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 279.881783][T20030] RIP: 0033:0x465ef9 [ 279.885724][T20030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 279.905361][T20030] RSP: 002b:00007fc30b56d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 279.913809][T20030] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 279.921813][T20030] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 279.929810][T20030] RBP: 00007fc30b56d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 279.937801][T20030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.945792][T20030] R13: 00007ffe0280426f R14: 00007fc30b56d300 R15: 0000000000022000 [ 279.970383][T20026] socket: no more sockets [ 279.985079][T20035] FAULT_INJECTION: forcing a failure. 07:35:09 executing program 2 (fault-call:0 fault-nth:1): socket$kcm(0x29, 0x2, 0x0) [ 279.985079][T20035] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 280.011131][T20036] FAULT_INJECTION: forcing a failure. [ 280.011131][T20036] name failslab, interval 1, probability 0, space 0, times 0 [ 280.032478][T20035] CPU: 0 PID: 20035 Comm: syz-executor.0 Not tainted 5.12.0-rc1-next-20210304-syzkaller #0 [ 280.042511][T20035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.052601][T20035] Call Trace: [ 280.055902][T20035] dump_stack+0xfa/0x151 [ 280.060355][T20035] should_fail.cold+0x5/0xa [ 280.064893][T20035] _copy_to_user+0x2c/0x150 [ 280.069509][T20035] simple_read_from_buffer+0xcc/0x160 [ 280.074969][T20035] proc_fail_nth_read+0x187/0x220 [ 280.080072][T20035] ? proc_exe_link+0x1d0/0x1d0 [ 280.084863][T20035] ? security_file_permission+0x248/0x560 [ 280.090626][T20035] ? proc_exe_link+0x1d0/0x1d0 [ 280.095422][T20035] vfs_read+0x1b5/0x570 [ 280.099687][T20035] ksys_read+0x12d/0x250 [ 280.103958][T20035] ? vfs_write+0xa30/0xa30 [ 280.108404][T20035] ? syscall_enter_from_user_mode+0x1d/0x50 [ 280.114342][T20035] do_syscall_64+0x2d/0x70 [ 280.118782][T20035] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 280.124696][T20035] RIP: 0033:0x41917c [ 280.128608][T20035] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 280.152748][T20035] RSP: 002b:00007f9299914170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 280.161192][T20035] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041917c [ 280.169186][T20035] RDX: 000000000000000f RSI: 00007f92999141e0 RDI: 0000000000000003 [ 280.177176][T20035] RBP: 00007f92999141d0 R08: 0000000000000000 R09: 0000000000000000 [ 280.181414][T20009] socket: no more sockets [ 280.185155][T20035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.185203][T20035] R13: 00007ffcff47a9df R14: 00007f9299914300 R15: 0000000000022000 [ 280.203237][T20036] CPU: 0 PID: 20036 Comm: syz-executor.3 Not tainted 5.12.0-rc1-next-20210304-syzkaller #0 [ 280.215694][T20036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.225767][T20036] Call Trace: [ 280.229060][T20036] dump_stack+0xfa/0x151 [ 280.233338][T20036] should_fail.cold+0x5/0xa [ 280.237868][T20036] ? sock_alloc_inode+0x18/0x1c0 [ 280.242830][T20036] should_failslab+0x5/0x10 [ 280.247362][T20036] kmem_cache_alloc+0x5e/0x380 [ 280.252147][T20036] ? sock_free_inode+0x20/0x20 [ 280.256936][T20036] sock_alloc_inode+0x18/0x1c0 [ 280.261721][T20036] ? sock_free_inode+0x20/0x20 [ 280.266509][T20036] alloc_inode+0x61/0x230 [ 280.270865][T20036] new_inode_pseudo+0x14/0xe0 [ 280.275568][T20036] sock_alloc+0x3c/0x260 [ 280.279927][T20036] __sock_create+0xb9/0x780 [ 280.284457][T20036] ? wait_for_completion_io+0x270/0x270 [ 280.290041][T20036] __sys_socket+0xef/0x200 [ 280.294488][T20036] ? move_addr_to_kernel+0x70/0x70 [ 280.299643][T20036] __x64_sys_socket+0x6f/0xb0 [ 280.304348][T20036] ? syscall_enter_from_user_mode+0x1d/0x50 [ 280.310281][T20036] do_syscall_64+0x2d/0x70 [ 280.314729][T20036] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 280.320653][T20036] RIP: 0033:0x465ef9 07:35:09 executing program 1: socket$kcm(0x29, 0x2, 0x0) [ 280.324566][T20036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 280.344202][T20036] RSP: 002b:00007f0267878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 280.352643][T20036] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 280.360638][T20036] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 280.368631][T20036] RBP: 00007f02678781d0 R08: 0000000000000000 R09: 0000000000000000 [ 280.376625][T20036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.384620][T20036] R13: 00007ffdac97b98f R14: 00007f0267878300 R15: 0000000000022000 [ 280.408800][T20029] socket: no more sockets 07:35:09 executing program 5: socket$kcm(0x29, 0x2, 0x0) 07:35:09 executing program 1: socket$kcm(0x2, 0x2, 0x0) [ 280.473574][T20042] FAULT_INJECTION: forcing a failure. [ 280.473574][T20042] name failslab, interval 1, probability 0, space 0, times 0 [ 280.494914][T20042] CPU: 0 PID: 20042 Comm: syz-executor.2 Not tainted 5.12.0-rc1-next-20210304-syzkaller #0 [ 280.504941][T20042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.515021][T20042] Call Trace: [ 280.518317][T20042] dump_stack+0xfa/0x151 [ 280.522596][T20042] should_fail.cold+0x5/0xa [ 280.527127][T20042] ? security_inode_alloc+0x34/0x160 [ 280.532440][T20042] should_failslab+0x5/0x10 [ 280.536967][T20042] kmem_cache_alloc+0x5e/0x380 [ 280.541759][T20042] security_inode_alloc+0x34/0x160 [ 280.546909][T20042] inode_init_always+0x5d8/0xd60 [ 280.551877][T20042] ? __init_waitqueue_head+0x6b/0xd0 [ 280.557191][T20042] alloc_inode+0x82/0x230 [ 280.561546][T20042] new_inode_pseudo+0x14/0xe0 [ 280.566256][T20042] sock_alloc+0x3c/0x260 [ 280.570526][T20042] __sock_create+0xb9/0x780 [ 280.575057][T20042] ? wait_for_completion_io+0x270/0x270 [ 280.580641][T20042] __sys_socket+0xef/0x200 [ 280.585088][T20042] ? move_addr_to_kernel+0x70/0x70 [ 280.590240][T20042] __x64_sys_socket+0x6f/0xb0 [ 280.594945][T20042] ? syscall_enter_from_user_mode+0x1d/0x50 [ 280.600878][T20042] do_syscall_64+0x2d/0x70 [ 280.605325][T20042] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 280.611246][T20042] RIP: 0033:0x465ef9 [ 280.615160][T20042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 280.634878][T20042] RSP: 002b:00007f28f44ea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 280.643326][T20042] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 280.651321][T20042] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 280.659317][T20042] RBP: 00007f28f44ea1d0 R08: 0000000000000000 R09: 0000000000000000 07:35:09 executing program 5: socket$kcm(0x2, 0x2, 0x0) [ 280.667314][T20042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.675304][T20042] R13: 00007fffbcc9740f R14: 00007f28f44ea300 R15: 0000000000022000 [ 280.721880][T20030] socket: no more sockets 07:35:09 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) 07:35:09 executing program 1: socket$kcm(0x2c, 0x2, 0x0) 07:35:09 executing program 4: socket$kcm(0x29, 0x2, 0x0) 07:35:10 executing program 1: socket$kcm(0x29, 0x5, 0x0) 07:35:10 executing program 5: socket$kcm(0x2c, 0x2, 0x0) [ 280.805449][T20036] socket: no more sockets 07:35:10 executing program 3 (fault-call:0 fault-nth:1): socket$kcm(0x29, 0x2, 0x0) 07:35:10 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x7) [ 280.876268][T20042] socket: no more sockets 07:35:10 executing program 2 (fault-call:0 fault-nth:2): socket$kcm(0x29, 0x2, 0x0) 07:35:10 executing program 4: socket$kcm(0x2, 0x2, 0x0) 07:35:10 executing program 5: socket$kcm(0x29, 0x5, 0x0) 07:35:10 executing program 1: socket$kcm(0x29, 0xa, 0x0) [ 281.013867][T20063] FAULT_INJECTION: forcing a failure. [ 281.013867][T20063] name failslab, interval 1, probability 0, space 0, times 0 [ 281.052862][T20067] FAULT_INJECTION: forcing a failure. [ 281.052862][T20067] name failslab, interval 1, probability 0, space 0, times 0 [ 281.094444][T20063] CPU: 0 PID: 20063 Comm: syz-executor.3 Not tainted 5.12.0-rc1-next-20210304-syzkaller #0 [ 281.104480][T20063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.114561][T20063] Call Trace: [ 281.117859][T20063] dump_stack+0xfa/0x151 [ 281.122130][T20063] should_fail.cold+0x5/0xa [ 281.126651][T20063] ? security_inode_alloc+0x34/0x160 [ 281.131968][T20063] should_failslab+0x5/0x10 [ 281.136495][T20063] kmem_cache_alloc+0x5e/0x380 [ 281.141292][T20063] security_inode_alloc+0x34/0x160 [ 281.146440][T20063] inode_init_always+0x5d8/0xd60 [ 281.151406][T20063] ? __init_waitqueue_head+0x6b/0xd0 [ 281.156721][T20063] alloc_inode+0x82/0x230 [ 281.161071][T20063] new_inode_pseudo+0x14/0xe0 [ 281.165786][T20063] sock_alloc+0x3c/0x260 [ 281.170066][T20063] __sock_create+0xb9/0x780 [ 281.174599][T20063] ? wait_for_completion_io+0x270/0x270 [ 281.180182][T20063] __sys_socket+0xef/0x200 [ 281.184626][T20063] ? move_addr_to_kernel+0x70/0x70 [ 281.189770][T20063] __x64_sys_socket+0x6f/0xb0 [ 281.194499][T20063] ? syscall_enter_from_user_mode+0x1d/0x50 [ 281.200421][T20063] do_syscall_64+0x2d/0x70 [ 281.204874][T20063] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 281.211133][T20063] RIP: 0033:0x465ef9 [ 281.215031][T20063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 281.234658][T20063] RSP: 002b:00007f0267878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 07:35:10 executing program 1: socket$kcm(0x29, 0x2, 0x0) [ 281.243100][T20063] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 281.251094][T20063] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 281.259083][T20063] RBP: 00007f02678781d0 R08: 0000000000000000 R09: 0000000000000000 [ 281.267073][T20063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.275062][T20063] R13: 00007ffdac97b98f R14: 00007f0267878300 R15: 0000000000022000 [ 281.283056][T20067] CPU: 1 PID: 20067 Comm: syz-executor.2 Not tainted 5.12.0-rc1-next-20210304-syzkaller #0 [ 281.293080][T20067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.303154][T20067] Call Trace: [ 281.306449][T20067] dump_stack+0xfa/0x151 [ 281.310720][T20067] should_fail.cold+0x5/0xa [ 281.315248][T20067] ? sk_prot_alloc+0x5f/0x290 [ 281.320035][T20067] should_failslab+0x5/0x10 [ 281.324562][T20067] kmem_cache_alloc+0x5e/0x380 [ 281.329362][T20067] sk_prot_alloc+0x5f/0x290 [ 281.333894][T20067] sk_alloc+0x32/0xbd0 [ 281.337984][T20067] kcm_create+0x22c/0x920 07:35:10 executing program 1: socket$kcm(0x29, 0x2, 0x3) 07:35:10 executing program 1: socket$kcm(0x29, 0x2, 0x4) [ 281.342396][T20067] __sock_create+0x3de/0x780 [ 281.344702][T20063] socket: no more sockets [ 281.347013][T20067] __sys_socket+0xef/0x200 [ 281.347047][T20067] ? move_addr_to_kernel+0x70/0x70 [ 281.347085][T20067] __x64_sys_socket+0x6f/0xb0 [ 281.365569][T20067] ? syscall_enter_from_user_mode+0x1d/0x50 [ 281.371501][T20067] do_syscall_64+0x2d/0x70 [ 281.375953][T20067] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 281.381873][T20067] RIP: 0033:0x465ef9 07:35:10 executing program 1: socket$kcm(0x29, 0x2, 0x7) [ 281.385784][T20067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 281.407237][T20067] RSP: 002b:00007f28f44ea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 281.415777][T20067] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 281.423775][T20067] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 281.431766][T20067] RBP: 00007f28f44ea1d0 R08: 0000000000000000 R09: 0000000000000000 07:35:10 executing program 4: socket$kcm(0x2c, 0x2, 0x0) 07:35:10 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x700) [ 281.439754][T20067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.447740][T20067] R13: 00007fffbcc9740f R14: 00007f28f44ea300 R15: 0000000000022000 07:35:10 executing program 3 (fault-call:0 fault-nth:2): socket$kcm(0x29, 0x2, 0x0) 07:35:10 executing program 1: socket$kcm(0x29, 0x2, 0x300) 07:35:10 executing program 2 (fault-call:0 fault-nth:3): socket$kcm(0x29, 0x2, 0x0) 07:35:10 executing program 5: socket$kcm(0x29, 0xa, 0x0) 07:35:10 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x7000000) 07:35:10 executing program 4: socket$kcm(0x29, 0x5, 0x0) 07:35:10 executing program 1: socket$kcm(0x29, 0x2, 0x700) [ 281.679580][T20093] FAULT_INJECTION: forcing a failure. [ 281.679580][T20093] name failslab, interval 1, probability 0, space 0, times 0 [ 281.715380][T20094] FAULT_INJECTION: forcing a failure. [ 281.715380][T20094] name failslab, interval 1, probability 0, space 0, times 0 07:35:10 executing program 5: socket$kcm(0x29, 0x2, 0x0) [ 281.754492][T20093] CPU: 1 PID: 20093 Comm: syz-executor.2 Not tainted 5.12.0-rc1-next-20210304-syzkaller #0 [ 281.764529][T20093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.774609][T20093] Call Trace: [ 281.777908][T20093] dump_stack+0xfa/0x151 [ 281.782180][T20093] should_fail.cold+0x5/0xa [ 281.786714][T20093] ? apparmor_sk_alloc_security+0x79/0x100 [ 281.792628][T20093] should_failslab+0x5/0x10 [ 281.797153][T20093] kmem_cache_alloc_trace+0x55/0x3a0 [ 281.803020][T20093] apparmor_sk_alloc_security+0x79/0x100 [ 281.808691][T20093] security_sk_alloc+0x50/0xb0 [ 281.813476][T20093] sk_prot_alloc+0xa9/0x290 [ 281.817998][T20093] sk_alloc+0x32/0xbd0 [ 281.822123][T20093] kcm_create+0x22c/0x920 [ 281.826465][T20093] __sock_create+0x3de/0x780 [ 281.831073][T20093] __sys_socket+0xef/0x200 [ 281.835505][T20093] ? move_addr_to_kernel+0x70/0x70 [ 281.840649][T20093] __x64_sys_socket+0x6f/0xb0 [ 281.845346][T20093] ? syscall_enter_from_user_mode+0x1d/0x50 07:35:11 executing program 1: socket$kcm(0x29, 0x2, 0x3000000) [ 281.851255][T20093] do_syscall_64+0x2d/0x70 [ 281.855745][T20093] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 281.861663][T20093] RIP: 0033:0x465ef9 [ 281.865573][T20093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 281.885206][T20093] RSP: 002b:00007f28f44ea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 281.893644][T20093] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 07:35:11 executing program 1: socket$kcm(0x29, 0x2, 0x4000000) [ 281.901624][T20093] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 281.909610][T20093] RBP: 00007f28f44ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 281.917605][T20093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.925630][T20093] R13: 00007fffbcc9740f R14: 00007f28f44ea300 R15: 0000000000022000 [ 281.965267][T20094] CPU: 0 PID: 20094 Comm: syz-executor.3 Not tainted 5.12.0-rc1-next-20210304-syzkaller #0 [ 281.975307][T20094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.985393][T20094] Call Trace: [ 281.988687][T20094] dump_stack+0xfa/0x151 [ 281.992957][T20094] should_fail.cold+0x5/0xa [ 281.997487][T20094] ? sk_prot_alloc+0x5f/0x290 [ 282.002187][T20094] should_failslab+0x5/0x10 [ 282.006710][T20094] kmem_cache_alloc+0x5e/0x380 [ 282.011506][T20094] sk_prot_alloc+0x5f/0x290 [ 282.016037][T20094] sk_alloc+0x32/0xbd0 [ 282.020132][T20094] kcm_create+0x22c/0x920 [ 282.024494][T20094] __sock_create+0x3de/0x780 [ 282.029129][T20094] __sys_socket+0xef/0x200 [ 282.033595][T20094] ? move_addr_to_kernel+0x70/0x70 [ 282.038743][T20094] __x64_sys_socket+0x6f/0xb0 [ 282.043440][T20094] ? syscall_enter_from_user_mode+0x1d/0x50 [ 282.049360][T20094] do_syscall_64+0x2d/0x70 [ 282.053800][T20094] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 282.059709][T20094] RIP: 0033:0x465ef9 [ 282.063616][T20094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 282.083242][T20094] RSP: 002b:00007f0267878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 282.091680][T20094] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 282.099673][T20094] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 282.107664][T20094] RBP: 00007f02678781d0 R08: 0000000000000000 R09: 0000000000000000 07:35:11 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x700000000000000) 07:35:11 executing program 4: socket$kcm(0x29, 0xa, 0x0) [ 282.115661][T20094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.123650][T20094] R13: 00007ffdac97b98f R14: 00007f0267878300 R15: 0000000000022000 07:35:11 executing program 3 (fault-call:0 fault-nth:3): socket$kcm(0x29, 0x2, 0x0) 07:35:11 executing program 5: socket$kcm(0x29, 0x2, 0x3) 07:35:11 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000004c0)='/dev/input/mouse#\x00', 0x8, 0x28000) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000500)=0x1, 0x4) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0xdb, &(0x7f0000000180)=""/50) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000200)=0x240a, 0x4) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000680)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000700)=""/201, 0xc9}], 0x1, &(0x7f0000000840)=""/243, 0xf3}, 0x40002000) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x3, 0x15a, 0x7, {0x77359400}, {}, {0x2, 0x1, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x39, 0x0, 0x0, 0x0, "55044fd4f3da8918f81c01a13d9bdf7b9ebdaaea23ac00c55f892bafb58d84c22ab11d3aa872e317705b84eecf675ae58d541d9000"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4044) 07:35:11 executing program 2 (fault-call:0 fault-nth:4): socket$kcm(0x29, 0x2, 0x0) 07:35:11 executing program 1: socket$kcm(0x29, 0x2, 0x7000000) 07:35:11 executing program 4: socket$kcm(0x29, 0x2, 0x0) 07:35:11 executing program 5: socket$kcm(0x29, 0x2, 0x4) [ 282.348403][T20117] FAULT_INJECTION: forcing a failure. [ 282.348403][T20117] name failslab, interval 1, probability 0, space 0, times 0 07:35:11 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000000)) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) [ 282.407106][T20123] FAULT_INJECTION: forcing a failure. [ 282.407106][T20123] name failslab, interval 1, probability 0, space 0, times 0 [ 282.418258][T20117] CPU: 0 PID: 20117 Comm: syz-executor.2 Not tainted 5.12.0-rc1-next-20210304-syzkaller #0 [ 282.429718][T20117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.439794][T20117] Call Trace: [ 282.443090][T20117] dump_stack+0xfa/0x151 [ 282.447371][T20117] should_fail.cold+0x5/0xa [ 282.451907][T20117] ? kcm_create+0x24e/0x920 [ 282.456438][T20117] should_failslab+0x5/0x10 [ 282.460967][T20117] kmem_cache_alloc+0x5e/0x380 [ 282.465761][T20117] kcm_create+0x24e/0x920 [ 282.470118][T20117] __sock_create+0x3de/0x780 [ 282.474747][T20117] __sys_socket+0xef/0x200 [ 282.479185][T20117] ? move_addr_to_kernel+0x70/0x70 [ 282.484322][T20117] __x64_sys_socket+0x6f/0xb0 [ 282.489021][T20117] ? syscall_enter_from_user_mode+0x1d/0x50 [ 282.494931][T20117] do_syscall_64+0x2d/0x70 [ 282.499366][T20117] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 282.505269][T20117] RIP: 0033:0x465ef9 [ 282.509182][T20117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 282.528812][T20117] RSP: 002b:00007f28f44ea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 282.537256][T20117] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 282.545249][T20117] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 07:35:11 executing program 1: socket$kcm(0x29, 0x2, 0xfeffffff) [ 282.553266][T20117] RBP: 00007f28f44ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 282.561256][T20117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.569245][T20117] R13: 00007fffbcc9740f R14: 00007f28f44ea300 R15: 0000000000022000 [ 282.587277][T20123] CPU: 0 PID: 20123 Comm: syz-executor.3 Not tainted 5.12.0-rc1-next-20210304-syzkaller #0 [ 282.597292][T20123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.607369][T20123] Call Trace: [ 282.610697][T20123] dump_stack+0xfa/0x151 [ 282.614969][T20123] should_fail.cold+0x5/0xa [ 282.619497][T20123] ? apparmor_sk_alloc_security+0x79/0x100 [ 282.625330][T20123] should_failslab+0x5/0x10 [ 282.629854][T20123] kmem_cache_alloc_trace+0x55/0x3a0 [ 282.635170][T20123] apparmor_sk_alloc_security+0x79/0x100 [ 282.640834][T20123] security_sk_alloc+0x50/0xb0 [ 282.645630][T20123] sk_prot_alloc+0xa9/0x290 [ 282.650160][T20123] sk_alloc+0x32/0xbd0 [ 282.654249][T20123] kcm_create+0x22c/0x920 [ 282.658604][T20123] __sock_create+0x3de/0x780 [ 282.663224][T20123] __sys_socket+0xef/0x200 [ 282.667672][T20123] ? move_addr_to_kernel+0x70/0x70 [ 282.672818][T20123] __x64_sys_socket+0x6f/0xb0 [ 282.677515][T20123] ? syscall_enter_from_user_mode+0x1d/0x50 [ 282.683437][T20123] do_syscall_64+0x2d/0x70 [ 282.687875][T20123] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 282.693786][T20123] RIP: 0033:0x465ef9 [ 282.697686][T20123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 282.717311][T20123] RSP: 002b:00007f0267878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 282.725751][T20123] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 282.733830][T20123] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 282.741827][T20123] RBP: 00007f02678781d0 R08: 0000000000000000 R09: 0000000000000000 [ 282.749820][T20123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.757810][T20123] R13: 00007ffdac97b98f R14: 00007f0267878300 R15: 0000000000022000 07:35:12 executing program 2 (fault-call:0 fault-nth:5): socket$kcm(0x29, 0x2, 0x0) 07:35:12 executing program 5: socket$kcm(0x29, 0x2, 0x300) 07:35:12 executing program 1: socket$kcm(0x29, 0x2, 0xfffffffe) 07:35:12 executing program 3 (fault-call:0 fault-nth:4): socket$kcm(0x29, 0x2, 0x0) 07:35:12 executing program 4: socket$kcm(0x29, 0x2, 0x3) 07:35:12 executing program 0: ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) [ 282.958470][T20137] FAULT_INJECTION: forcing a failure. [ 282.958470][T20137] name failslab, interval 1, probability 0, space 0, times 0 [ 283.020910][T20137] CPU: 1 PID: 20137 Comm: syz-executor.2 Not tainted 5.12.0-rc1-next-20210304-syzkaller #0 [ 283.030947][T20137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.041016][T20137] Call Trace: [ 283.044312][T20137] dump_stack+0xfa/0x151 [ 283.048589][T20137] should_fail.cold+0x5/0xa [ 283.053126][T20137] ? __d_alloc+0x2a/0x950 [ 283.057492][T20137] should_failslab+0x5/0x10 [ 283.062021][T20137] kmem_cache_alloc+0x5e/0x380 [ 283.066827][T20137] __d_alloc+0x2a/0x950 [ 283.071008][T20137] ? lock_release+0x3bb/0x710 [ 283.075773][T20137] ? alloc_fd+0x2bc/0x640 [ 283.080129][T20137] d_alloc_pseudo+0x19/0x70 [ 283.084657][T20137] alloc_file_pseudo+0xc6/0x250 [ 283.089535][T20137] ? alloc_file+0x5a0/0x5a0 [ 283.094068][T20137] ? do_raw_spin_unlock+0x171/0x230 [ 283.099290][T20137] ? _raw_spin_unlock+0x24/0x40 [ 283.104159][T20137] ? alloc_fd+0x2bc/0x640 [ 283.108516][T20137] sock_alloc_file+0x4f/0x190 [ 283.113224][T20137] __sys_socket+0x13d/0x200 [ 283.117757][T20137] ? move_addr_to_kernel+0x70/0x70 [ 283.122904][T20137] __x64_sys_socket+0x6f/0xb0 [ 283.127605][T20137] ? syscall_enter_from_user_mode+0x1d/0x50 [ 283.133612][T20137] do_syscall_64+0x2d/0x70 [ 283.138058][T20137] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 283.143980][T20137] RIP: 0033:0x465ef9 [ 283.147893][T20137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 07:35:12 executing program 4: socket$kcm(0x29, 0x2, 0x4) 07:35:12 executing program 1: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff8001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x140}, 0x81) socket$kcm(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="e94d193d", @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf25110000000500290001000000080039000700000008003c0009de0000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80c1) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0xa060, 0x0) [ 283.167523][T20137] RSP: 002b:00007f28f44ea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 283.175963][T20137] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 283.183957][T20137] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 283.191952][T20137] RBP: 00007f28f44ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 283.199946][T20137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.207940][T20137] R13: 00007fffbcc9740f R14: 00007f28f44ea300 R15: 0000000000022000 07:35:12 executing program 4: socket$kcm(0x29, 0x2, 0x7) 07:35:12 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000100), 0x4) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)={0x7f, 0x3, 0x4, 0x8, 0x1, {r1, r2/1000+60000}, {0x1, 0x2, 0x5, 0x7, 0x7f, 0x1, "743218bf"}, 0x4a, 0x1, @planes=&(0x7f0000000040)={0x101, 0x8, @fd, 0x6167}, 0x3}) 07:35:12 executing program 1: socket$kcm(0x29, 0x2, 0x0) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x4, 0x80200) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x477a}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}}, 0x80) 07:35:12 executing program 5: socket$kcm(0x29, 0x2, 0x3000000) [ 283.404796][T20155] FAULT_INJECTION: forcing a failure. [ 283.404796][T20155] name failslab, interval 1, probability 0, space 0, times 0 [ 283.445207][T20155] CPU: 0 PID: 20155 Comm: syz-executor.3 Not tainted 5.12.0-rc1-next-20210304-syzkaller #0 [ 283.455242][T20155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.465316][T20155] Call Trace: [ 283.468613][T20155] dump_stack+0xfa/0x151 [ 283.472889][T20155] should_fail.cold+0x5/0xa [ 283.477426][T20155] ? kcm_create+0x24e/0x920 [ 283.481960][T20155] should_failslab+0x5/0x10 [ 283.486489][T20155] kmem_cache_alloc+0x5e/0x380 [ 283.491279][T20155] kcm_create+0x24e/0x920 [ 283.495635][T20155] __sock_create+0x3de/0x780 [ 283.500263][T20155] __sys_socket+0xef/0x200 [ 283.504705][T20155] ? move_addr_to_kernel+0x70/0x70 [ 283.509857][T20155] __x64_sys_socket+0x6f/0xb0 [ 283.514557][T20155] ? syscall_enter_from_user_mode+0x1d/0x50 [ 283.520472][T20155] do_syscall_64+0x2d/0x70 [ 283.524909][T20155] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 283.530825][T20155] RIP: 0033:0x465ef9 [ 283.534737][T20155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 283.554459][T20155] RSP: 002b:00007f0267878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 283.562903][T20155] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 283.570899][T20155] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 283.578888][T20155] RBP: 00007f02678781d0 R08: 0000000000000000 R09: 0000000000000000 [ 283.586895][T20155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.594885][T20155] R13: 00007ffdac97b98f R14: 00007f0267878300 R15: 0000000000022000 07:35:13 executing program 2 (fault-call:0 fault-nth:6): socket$kcm(0x29, 0x2, 0x0) 07:35:13 executing program 4: socket$kcm(0x29, 0x2, 0x300) 07:35:13 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in=@private, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000500)=0xe8) socket$can_raw(0x1d, 0x3, 0x1) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r2, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000fddbdf250d000000050037000e000000080005f9", @ANYRES32=r1, @ANYBLOB="080032000002000008002b00c1ffffff0800310000020000050029000000000008002b000200000005002f0000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4c80c}, 0x80) socketpair(0x1f, 0xa, 0x6, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040050}, 0x4811) 07:35:13 executing program 5: socket$kcm(0x29, 0x2, 0x4000000) 07:35:13 executing program 1: socket$kcm(0x29, 0x2, 0x0) 07:35:13 executing program 3 (fault-call:0 fault-nth:5): socket$kcm(0x29, 0x2, 0x0) [ 283.860111][T20177] FAULT_INJECTION: forcing a failure. [ 283.860111][T20177] name failslab, interval 1, probability 0, space 0, times 0 07:35:13 executing program 4: socket$kcm(0x29, 0x2, 0x700) [ 283.901490][T20181] FAULT_INJECTION: forcing a failure. [ 283.901490][T20181] name failslab, interval 1, probability 0, space 0, times 0 [ 283.930133][T20177] CPU: 0 PID: 20177 Comm: syz-executor.3 Not tainted 5.12.0-rc1-next-20210304-syzkaller #0 [ 283.940163][T20177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.950236][T20177] Call Trace: [ 283.953534][T20177] dump_stack+0xfa/0x151 [ 283.957893][T20177] should_fail.cold+0x5/0xa [ 283.962419][T20177] ? __d_alloc+0x2a/0x950 [ 283.966779][T20177] should_failslab+0x5/0x10 [ 283.971307][T20177] kmem_cache_alloc+0x5e/0x380 [ 283.976090][T20177] __d_alloc+0x2a/0x950 [ 283.980265][T20177] ? lock_release+0x3bb/0x710 [ 283.984962][T20177] ? alloc_fd+0x2bc/0x640 [ 283.989312][T20177] d_alloc_pseudo+0x19/0x70 [ 283.993822][T20177] alloc_file_pseudo+0xc6/0x250 [ 283.998688][T20177] ? alloc_file+0x5a0/0x5a0 [ 284.003219][T20177] ? do_raw_spin_unlock+0x171/0x230 [ 284.008445][T20177] ? _raw_spin_unlock+0x24/0x40 [ 284.013324][T20177] ? alloc_fd+0x2bc/0x640 [ 284.017690][T20177] sock_alloc_file+0x4f/0x190 [ 284.022380][T20177] __sys_socket+0x13d/0x200 [ 284.026903][T20177] ? move_addr_to_kernel+0x70/0x70 [ 284.032055][T20177] __x64_sys_socket+0x6f/0xb0 [ 284.036774][T20177] ? syscall_enter_from_user_mode+0x1d/0x50 [ 284.042690][T20177] do_syscall_64+0x2d/0x70 07:35:13 executing program 4: socket$kcm(0x29, 0x2, 0x3000000) [ 284.047129][T20177] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 284.053048][T20177] RIP: 0033:0x465ef9 [ 284.056956][T20177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 284.076576][T20177] RSP: 002b:00007f0267878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 284.085026][T20177] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 284.093005][T20177] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 284.100997][T20177] RBP: 00007f02678781d0 R08: 0000000000000000 R09: 0000000000000000 [ 284.108985][T20177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.116967][T20177] R13: 00007ffdac97b98f R14: 00007f0267878300 R15: 0000000000022000 [ 284.125059][T20181] CPU: 1 PID: 20181 Comm: syz-executor.2 Not tainted 5.12.0-rc1-next-20210304-syzkaller #0 [ 284.136896][T20181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.146965][T20181] Call Trace: [ 284.150254][T20181] dump_stack+0xfa/0x151 [ 284.154525][T20181] should_fail.cold+0x5/0xa [ 284.159065][T20181] ? __alloc_file+0x21/0x280 [ 284.163681][T20181] should_failslab+0x5/0x10 [ 284.168205][T20181] kmem_cache_alloc+0x5e/0x380 [ 284.172990][T20181] __alloc_file+0x21/0x280 [ 284.177433][T20181] alloc_empty_file+0x6d/0x170 [ 284.182222][T20181] alloc_file+0x5e/0x5a0 [ 284.186494][T20181] alloc_file_pseudo+0x165/0x250 [ 284.191461][T20181] ? alloc_file+0x5a0/0x5a0 [ 284.195989][T20181] ? do_raw_spin_unlock+0x171/0x230 [ 284.201212][T20181] ? _raw_spin_unlock+0x24/0x40 [ 284.206079][T20181] ? alloc_fd+0x2bc/0x640 [ 284.210437][T20181] sock_alloc_file+0x4f/0x190 [ 284.215156][T20181] __sys_socket+0x13d/0x200 [ 284.219679][T20181] ? move_addr_to_kernel+0x70/0x70 [ 284.224823][T20181] __x64_sys_socket+0x6f/0xb0 [ 284.229518][T20181] ? syscall_enter_from_user_mode+0x1d/0x50 [ 284.235434][T20181] do_syscall_64+0x2d/0x70 [ 284.239872][T20181] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 284.245783][T20181] RIP: 0033:0x465ef9 [ 284.249688][T20181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 284.269339][T20181] RSP: 002b:00007f28f44ea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 284.277772][T20181] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 284.285760][T20181] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 284.293746][T20181] RBP: 00007f28f44ea1d0 R08: 0000000000000000 R09: 0000000000000000 07:35:13 executing program 3 (fault-call:0 fault-nth:6): socket$kcm(0x29, 0x2, 0x0) 07:35:13 executing program 5: socket$kcm(0x29, 0x2, 0xfeffffff) 07:35:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140)='nl802154\x00', r0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x88000100}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd8, r1, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0xa8, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x80, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xccd}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80000000}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0880}, 0x40) socket$kcm(0x29, 0x2, 0x0) [ 284.301730][T20181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.309713][T20181] R13: 00007fffbcc9740f R14: 00007f28f44ea300 R15: 0000000000022000 07:35:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00', r0) socket$kcm(0x29, 0x2, 0x0) [ 284.406988][T20196] FAULT_INJECTION: forcing a failure. [ 284.406988][T20196] name failslab, interval 1, probability 0, space 0, times 0 [ 284.447562][T20196] CPU: 1 PID: 20196 Comm: syz-executor.3 Not tainted 5.12.0-rc1-next-20210304-syzkaller #0 [ 284.457595][T20196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.467675][T20196] Call Trace: [ 284.470972][T20196] dump_stack+0xfa/0x151 [ 284.475250][T20196] should_fail.cold+0x5/0xa [ 284.479786][T20196] ? __alloc_file+0x21/0x280 [ 284.484407][T20196] should_failslab+0x5/0x10 [ 284.488944][T20196] kmem_cache_alloc+0x5e/0x380 [ 284.493734][T20196] __alloc_file+0x21/0x280 [ 284.498177][T20196] alloc_empty_file+0x6d/0x170 [ 284.502969][T20196] alloc_file+0x5e/0x5a0 [ 284.507242][T20196] alloc_file_pseudo+0x165/0x250 [ 284.512215][T20196] ? alloc_file+0x5a0/0x5a0 [ 284.516744][T20196] ? do_raw_spin_unlock+0x171/0x230 [ 284.521966][T20196] ? _raw_spin_unlock+0x24/0x40 [ 284.526834][T20196] ? alloc_fd+0x2bc/0x640 [ 284.531207][T20196] sock_alloc_file+0x4f/0x190 [ 284.535912][T20196] __sys_socket+0x13d/0x200 [ 284.540440][T20196] ? move_addr_to_kernel+0x70/0x70 [ 284.546019][T20196] __x64_sys_socket+0x6f/0xb0 [ 284.550718][T20196] ? syscall_enter_from_user_mode+0x1d/0x50 [ 284.556629][T20196] do_syscall_64+0x2d/0x70 [ 284.561068][T20196] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 284.566985][T20196] RIP: 0033:0x465ef9 [ 284.570892][T20196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 284.590524][T20196] RSP: 002b:00007f0267878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 284.598963][T20196] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 284.606953][T20196] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 284.614941][T20196] RBP: 00007f02678781d0 R08: 0000000000000000 R09: 0000000000000000 [ 284.622949][T20196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.630936][T20196] R13: 00007ffdac97b98f R14: 00007f0267878300 R15: 0000000000022000 07:35:14 executing program 2: socket$kcm(0x29, 0x2, 0x0) 07:35:14 executing program 5: socket$kcm(0x29, 0x2, 0xfffffffe) 07:35:14 executing program 4: socket$kcm(0x29, 0x2, 0x4000000) 07:35:14 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 07:35:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00', r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r2, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '*-))\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x2000840) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}}, 0x24004000) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x806}, 0x4000) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) 07:35:14 executing program 3 (fault-call:0 fault-nth:7): socket$kcm(0x29, 0x2, 0x0) 07:35:14 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001280)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/2, 0x2}, {&(0x7f00000010c0)=""/255, 0xff}], 0x3, &(0x7f0000001200)=""/74, 0x4a}, 0x120) [ 284.930453][T20218] FAULT_INJECTION: forcing a failure. [ 284.930453][T20218] name failslab, interval 1, probability 0, space 0, times 0 [ 284.984241][T20218] CPU: 1 PID: 20218 Comm: syz-executor.3 Not tainted 5.12.0-rc1-next-20210304-syzkaller #0 [ 284.994286][T20218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.004363][T20218] Call Trace: [ 285.007660][T20218] dump_stack+0xfa/0x151 [ 285.011972][T20218] should_fail.cold+0x5/0xa [ 285.016504][T20218] ? security_file_alloc+0x34/0x170 [ 285.021727][T20218] should_failslab+0x5/0x10 [ 285.026254][T20218] kmem_cache_alloc+0x5e/0x380 [ 285.031044][T20218] security_file_alloc+0x34/0x170 [ 285.036100][T20218] __alloc_file+0xd8/0x280 [ 285.040550][T20218] alloc_empty_file+0x6d/0x170 [ 285.045339][T20218] alloc_file+0x5e/0x5a0 [ 285.049608][T20218] alloc_file_pseudo+0x165/0x250 [ 285.054568][T20218] ? alloc_file+0x5a0/0x5a0 [ 285.059095][T20218] ? do_raw_spin_unlock+0x171/0x230 [ 285.064327][T20218] ? _raw_spin_unlock+0x24/0x40 [ 285.069200][T20218] ? alloc_fd+0x2bc/0x640 [ 285.073572][T20218] sock_alloc_file+0x4f/0x190 [ 285.078302][T20218] __sys_socket+0x13d/0x200 [ 285.082839][T20218] ? move_addr_to_kernel+0x70/0x70 [ 285.087992][T20218] __x64_sys_socket+0x6f/0xb0 [ 285.092699][T20218] ? syscall_enter_from_user_mode+0x1d/0x50 [ 285.098620][T20218] do_syscall_64+0x2d/0x70 [ 285.103073][T20218] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 285.108992][T20218] RIP: 0033:0x465ef9 [ 285.112913][T20218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 07:35:14 executing program 4: socket$kcm(0x29, 0x2, 0x7000000) 07:35:14 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xffffffffffffffa9, 0x40082) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000040)={{0xff, 0x8}, 'port1\x00', 0xbc, 0x14, 0x1, 0x0, 0x5, 0x9, 0x2, 0x0, 0x5, 0x4f}) 07:35:14 executing program 4: socket$kcm(0x29, 0x2, 0xfeffffff) 07:35:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00', r0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) 07:35:14 executing program 2: socket$kcm(0x2, 0x2, 0x0) 07:35:14 executing program 1: socket$kcm(0x29, 0x2, 0x0) [ 285.132638][T20218] RSP: 002b:00007f0267878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 285.141082][T20218] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 285.149077][T20218] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 285.157763][T20218] RBP: 00007f02678781d0 R08: 0000000000000000 R09: 0000000000000000 [ 285.165756][T20218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.173747][T20218] R13: 00007ffdac97b98f R14: 00007f0267878300 R15: 0000000000022000 07:35:14 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1f, 0x400000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000040)={{0x5, 0x20}, {0x50, 0xf4}, 0xffff860a, 0x1, 0x7}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_yield() socket$kcm(0x29, 0x2, 0x0) 07:35:14 executing program 4: socket$kcm(0x29, 0x2, 0xfffffffe) 07:35:14 executing program 1: socket$kcm(0x29, 0x5, 0x0) 07:35:14 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) bind$can_raw(r0, 0x0, 0x3b) 07:35:14 executing program 3 (fault-call:0 fault-nth:8): socket$kcm(0x29, 0x2, 0x0) 07:35:14 executing program 2: socket$kcm(0x2c, 0x2, 0x0) 07:35:14 executing program 1: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xa82}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x4004000) socket$kcm(0x29, 0x2, 0x0) 07:35:14 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = socket$kcm(0x29, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/255, 0xff}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f00000001c0)=""/58, 0x3a}], 0x3, &(0x7f0000000240)=""/143, 0x8f}, 0x40000000) 07:35:14 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x766c0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0x6, 0x401, 0x3, 0x3, 0x5, 0x4}) socket$kcm(0x29, 0x2, 0x0) 07:35:14 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = eventfd(0x81) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0x9) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) 07:35:14 executing program 5: recvmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/81, 0x51}, {&(0x7f00000001c0)=""/13, 0xd}], 0x2, &(0x7f0000000240)=""/100, 0x64}, 0x40012161) socket$kcm(0x29, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x24}}, @xdp={0x2c, 0x8, 0x0, 0x9}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='vcan0\x00', 0x1, 0x5cb2, 0xffc1}) [ 285.667204][T20263] FAULT_INJECTION: forcing a failure. [ 285.667204][T20263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.697906][T20263] CPU: 0 PID: 20263 Comm: syz-executor.3 Not tainted 5.12.0-rc1-next-20210304-syzkaller #0 07:35:14 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/seq\x00', 0x4040) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="44100000b72583e4313b02ce4a2d08738c8b9b04ccadcb69a1258fa94249050b0f44b56ccc1832e50acc9f52be5159343c6a55cce2090000000793b22ae9f6b5b5366b29fe6caea4d91b0dc3f0ad9b45120a3c82b6619bb75eba04c791402de6d85c79cae4047b14d2731f6ebf39bfb617c2aa0805d6a1af1e10175cf3be8165a2e4a81a7de50140a3c355dbbb0780b49dc7ff470cb646c71ffe744d56cd043632a11857b7", @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf250e00000008003200bd45000008003900cdd10000050029000000000005002d000000000008003a000600000005002e0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000084) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x30, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x40000) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000000)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/113, 0x71}, {&(0x7f0000000100)=""/123, 0x7b}, {&(0x7f0000000180)=""/28, 0x1c}], 0x3}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0x4) [ 285.707946][T20263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.718024][T20263] Call Trace: [ 285.721322][T20263] dump_stack+0xfa/0x151 [ 285.725600][T20263] should_fail.cold+0x5/0xa [ 285.730138][T20263] _copy_to_user+0x2c/0x150 [ 285.734666][T20263] simple_read_from_buffer+0xcc/0x160 [ 285.740066][T20263] proc_fail_nth_read+0x187/0x220 [ 285.745125][T20263] ? proc_exe_link+0x1d0/0x1d0 [ 285.749915][T20263] ? security_file_permission+0x248/0x560 [ 285.755754][T20263] ? proc_exe_link+0x1d0/0x1d0 [ 285.760551][T20263] vfs_read+0x1b5/0x570 [ 285.764739][T20263] ksys_read+0x12d/0x250 [ 285.769010][T20263] ? vfs_write+0xa30/0xa30 [ 285.773454][T20263] ? syscall_enter_from_user_mode+0x1d/0x50 [ 285.779377][T20263] do_syscall_64+0x2d/0x70 [ 285.783823][T20263] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 285.789749][T20263] RIP: 0033:0x41917c [ 285.793658][T20263] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 07:35:15 executing program 4: socket$kcm(0x29, 0x8, 0x0) 07:35:15 executing program 2: socket$kcm(0x29, 0x5, 0x0) 07:35:15 executing program 0: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000000)={{0x7, 0x3f}, 'port1\x00', 0x4, 0x8, 0x7, 0xb5, 0x80, 0x1e7, 0x200, 0x0, 0x0, 0x7}) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) [ 285.813294][T20263] RSP: 002b:00007f0267878170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 285.821734][T20263] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000041917c [ 285.829729][T20263] RDX: 000000000000000f RSI: 00007f02678781e0 RDI: 0000000000000003 [ 285.837720][T20263] RBP: 00007f02678781d0 R08: 0000000000000000 R09: 0000000000000000 [ 285.845708][T20263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.853695][T20263] R13: 00007ffdac97b98f R14: 00007f0267878300 R15: 0000000000022000 07:35:15 executing program 3: socket$kcm(0x29, 0x2, 0x0) 07:35:15 executing program 2: socket$kcm(0x29, 0xa, 0x0) 07:35:15 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) 07:35:15 executing program 4: socket$kcm(0x29, 0x7, 0x0) r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000940)={0x0, @can, @nl=@unspec, @ipx={0x4, 0x5, 0x8, "40e7f09fd390", 0x20}, 0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x49, 0x3}) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 07:35:15 executing program 3: socket$kcm(0x2, 0x2, 0x0) 07:35:15 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) bind$can_raw(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@private1, @in6=@mcast2}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe8) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c001000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000fddbdf2511000000080034000100000008003900ff01000008003b00810000002281147029bd28153dc6d1f7f7111232466ec63147956d4fb9"], 0x2c}}, 0x40800) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f00000006c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000ba1438e01ba22af200"/296], 0x22) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x7, 0x700c1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x80400) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000000)={0x6, 0x1, 'client1\x00', 0x3, "f493cb4f5e09847c", "648bb6e08aea2b8a50e1f8fa5f2e57af26055ed8f09b48a75827c777c90f1f5c", 0x1a1, 0x9}) 07:35:15 executing program 2: socket$kcm(0x29, 0x2, 0x0) 07:35:16 executing program 5: write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x300, 0x70bd2d, 0xfffffffd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0xffffffffffffffe7}}, 0x440d0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd2c, 0x5, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) socket$kcm(0x29, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@loopback}}, &(0x7f00000006c0)=0xe8) io_uring_enter(0xffffffffffffffff, 0x265d, 0xc2bd, 0x1, &(0x7f0000000300)={[0x20]}, 0x8) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00', r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) 07:35:16 executing program 1: socket$kcm(0x29, 0x7, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r0, 0x701, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) 07:35:16 executing program 4: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1f, 0x2100) recvmsg$kcm(r1, &(0x7f0000000400)={&(0x7f00000000c0)=@isdn, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/134, 0x86}, {&(0x7f0000000200)=""/84, 0x54}, {&(0x7f0000000280)=""/26, 0x1a}, {&(0x7f00000002c0)=""/202, 0xca}], 0x4}, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00', r0) 07:35:16 executing program 2: socket$kcm(0x29, 0x2, 0x3) 07:35:16 executing program 3: socket$kcm(0x2c, 0x2, 0x0) 07:35:16 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000240)='NLBL_CALIPSO\x00', 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00032dbd7000fddbdf252300000008000200", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0500220001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4044050}, 0x8800) 07:35:16 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x800, 0x503) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 07:35:16 executing program 3: socket$kcm(0x29, 0x5, 0x0) 07:35:16 executing program 2: socket$kcm(0x29, 0x2, 0x4) 07:35:16 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r1, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, @hci={0x1f, 0x3, 0x4}, @rc={0x1f, @fixed={[], 0x12}, 0x81}, @phonet={0x23, 0xff, 0x1, 0x40}, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1f5f, 0x5719, 0x93d}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001800)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private2}}, &(0x7f0000000080)=0xe8) bind$can_raw(r0, &(0x7f0000001940)={0x1d, r2}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xe, 0x50, r3, 0x2) 07:35:16 executing program 4: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/205, 0xcd}], 0x1, &(0x7f0000000140)=""/133, 0x85}, 0x40000001) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002e80)={{{@in, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000002f80)=0xe8) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x1d, r3}, 0x10, &(0x7f0000000340)={&(0x7f00000002c0)={0x3, 0x280, 0x8, {r1, r2/1000+10000}, {r4, r5/1000+10000}, {0x2, 0x0, 0x1}, 0x1, @can={{0x2, 0x1, 0x1, 0x1}, 0x1, 0x1, 0x0, 0x0, "5159661bf4300b20"}}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x20000800) 07:35:16 executing program 1: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) 07:35:16 executing program 5: clock_gettime(0x3, &(0x7f0000000000)) socket$kcm(0x29, 0x2, 0x0) clock_gettime(0x7, &(0x7f0000000080)) clock_getres(0x3, &(0x7f0000000040)) 07:35:16 executing program 3: socket$kcm(0x29, 0xa, 0x0) 07:35:16 executing program 2: socket$kcm(0x29, 0x2, 0x7) 07:35:16 executing program 1: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4044004) 07:35:16 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qrtr-tun\x00', 0x2000) write$qrtrtun(r1, &(0x7f0000000180)="78db2a9c516c", 0x6) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x0, 0xd86, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="4b84249bffac"}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1ff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x52}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x14000}, 0x88) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000001c0)=r0, 0x1) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000)=0x11, 0x4) socket$kcm(0x29, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, &(0x7f0000000040)={0x0, 0x0, 0x0, [], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x18) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 07:35:16 executing program 5: socket$kcm(0x29, 0x2, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) 07:35:16 executing program 1: ioprio_set$pid(0x0, 0x0, 0x4004) socket$kcm(0x29, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000080)={0xfffffffa, 0x1, {0x1, 0x2, 0x4ba, 0x1, 0x6}, 0x7}) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000040)=0x80000001) 07:35:16 executing program 2: socket$kcm(0x29, 0x2, 0x300) 07:35:16 executing program 3: socket$kcm(0x29, 0x2, 0x0) 07:35:17 executing program 0: r0 = fork() ptrace(0x4208, r0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f0000000000)=""/46) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) 07:35:17 executing program 4: socket$kcm(0x29, 0x2, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) 07:35:17 executing program 1: socket$kcm(0x29, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000000)={0x20, 0x2800000, 0x0, 'queue0\x00', 0xfd}) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) r1 = syz_open_dev$mouse(&(0x7f0000001980)='/dev/input/mouse#\x00', 0x9, 0x480000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x34, r0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}]}, 0x34}}, 0x1c011) 07:35:17 executing program 5: socket$kcm(0x29, 0x7, 0x0) 07:35:17 executing program 2: socket$kcm(0x29, 0x2, 0x700) 07:35:17 executing program 3: socket$kcm(0x29, 0x2, 0x3) 07:35:17 executing program 2: socket$kcm(0x29, 0x2, 0x3000000) 07:35:17 executing program 5: setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000000)=0x8, 0x4) socket$kcm(0x29, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="060000001400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r0, @ANYRES64=r1/1000+10000, @ANYBLOB="cf17531bb0c49a3a7dddbc040000a0010000000100004004"], 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) 07:35:17 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$kcm(0x29, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@private, @in6=@remote}}, {{@in=@empty}}}, &(0x7f0000000180)=0xe8) 07:35:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x4008001) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040)='NLBL_CIPSOv4\x00', 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="18044d535907680fcc7612000000", @ANYRES16=r1, @ANYBLOB="000429bd7000ffdbdf250300000004000480"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x800) socket$kcm(0x29, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r6, 0x200, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x20000020) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0)='nl802154\x00', r4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r8, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000740)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x7c, r7, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0x14, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x44}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x4084) sendmsg$NET_DM_CMD_STOP(r8, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10c0}, 0x4000885) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000000000000c000600030000000300000008000300", @ANYRES32=r3, @ANYBLOB="0800010003000000"], 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x14) 07:35:17 executing program 3: socket$kcm(0x29, 0x2, 0x4) 07:35:17 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000100)=0x1, 0x4) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], &(0x7f0000000040)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000080)={0x4a, 0x1, {0x1, 0x3, 0x80000000, 0x3, 0x80000001}, 0x2}) 07:35:17 executing program 3: socket$kcm(0x29, 0x2, 0x7) 07:35:17 executing program 5: socket$kcm(0x29, 0x1, 0x0) 07:35:17 executing program 4: socket$kcm(0x29, 0x7, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000000)) 07:35:17 executing program 2: socket$kcm(0x29, 0x2, 0x4000000) 07:35:17 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x5) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)=0x48) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1d4, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x9c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x5c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10001}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x101}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x81}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fff}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffff9}]}, @NL802154_ATTR_SEC_DEVKEY={0xb4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x200}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x10}, 0x40010) bind$can_raw(r0, &(0x7f00000000c0), 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004004}, 0x44800) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000003500)={{{@in=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000003600)=0xe8) bind$can_raw(r4, &(0x7f0000003640)={0x1d, r5}, 0x10) 07:35:17 executing program 2: socket$kcm(0x29, 0x2, 0x7000000) 07:35:17 executing program 5: socket$kcm(0x29, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x141000) 07:35:17 executing program 3: socket$kcm(0x29, 0x2, 0x300) 07:35:17 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) 07:35:18 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000240), &(0x7f0000000280)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00', r1) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012bbd7000810000000100000008002b0006000000050030000000000008003c00000000000500350080000000eddf50e84e3f1b66cabb494d9c54d38b49cd39c73ed106c4c2d971aa73b2b13a326b185d401140b334d8ac66af31c47f227ed05e7609a12cdd3fbc10"], 0x34}, 0x1, 0x0, 0x0, 0x20000014}, 0x40040c0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r0], 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x1}}, {{0x1, 0x1, 0x1}, {0x4, 0x0, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}], 0x18) 07:35:18 executing program 3: socket$kcm(0x29, 0x2, 0x700) 07:35:18 executing program 0: pselect6(0x40, &(0x7f0000000100)={0x2, 0xffff, 0xffff, 0x100000000, 0x4, 0x81, 0xc7d2, 0x20}, &(0x7f0000000140)={0x2, 0x80000000, 0x400, 0x93fa, 0x0, 0x4, 0x0, 0x6ab}, &(0x7f0000000180)={0x3, 0x400, 0xb4f, 0x7, 0xfffffffffffffff7, 0x80000001, 0x7a0000, 0xa06}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x4]}, 0x8}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000280)) 07:35:18 executing program 4: socket$kcm(0x29, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) r0 = socket$kcm(0x29, 0x7, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/132, 0x84}, {&(0x7f0000000200)=""/53, 0x35}], 0x2, &(0x7f0000000280)=""/68, 0x44}, 0x2000) socket$kcm(0x29, 0x5, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffe}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2fc}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0xd0) 07:35:18 executing program 2: socket$kcm(0x29, 0x2, 0xfeffffff) 07:35:18 executing program 5: socket$kcm(0x29, 0x2, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7fffffff, 0xa8a02) 07:35:18 executing program 3: socket$kcm(0x29, 0x2, 0x3000000) 07:35:18 executing program 2: socket$kcm(0x29, 0x2, 0xfffffffe) 07:35:18 executing program 4: ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000080)={0x1, 0x1, 'client0\x00', 0x0, "ac707bdccd28bda7", "1621a4b391a51cc947f2b70ddc61da773e4a37468292db8e89687c417bb293c4", 0x9}) socket$kcm(0x29, 0x2, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x8300) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x3ff, 0x4) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/timer_list\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000001c0)={{0x1, 0x5}, 'port1\x00', 0xcd, 0x22460, 0x6, 0x101, 0x5, 0x7fff, 0x9d, 0x0, 0x4, 0x3}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000140)={0xa2, 0x0, {0x0, 0x0, 0x1ff, 0x3, 0x6}, 0x9}) 07:35:18 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 07:35:18 executing program 1: socket$kcm(0x29, 0x0, 0x0) 07:35:18 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r0, 0x1) 07:35:18 executing program 3: socket$kcm(0x29, 0x2, 0x4000000) 07:35:18 executing program 2: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="03002dbd7000fbdbdf250e000000050037000100000008002c00080000000500300001000000080032000700000008003a0081000000b2badb72fed93d141caf8a8e7e664d017b6b7bff993a65df994d34d1049ee6e0b411c94c096378e75e4b8c1dc0f05c364bde4c263e3f3ad01c1343d0d1ad806fa7855c56b5c1e5c8b332d924df5f384a140571d80ec7f37e8097ec3fa7f03c734c35f772498ab681c168d035e5ec436922e41ee5facca9afa53d5943b9c327640a3e287c864d5889992a232b45b912ce8294a01b201556ad9007ac8c72191f86d61c7664d7efdc37a100aea0367dd03c91c52294f57fd044f9204f89ae111c3813dcdab16646b05fe31476aa70e0830ae6fcb55f05a1201918df7907c6d74075"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) 07:35:18 executing program 0: sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000810}, 0x40000) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) 07:35:18 executing program 1: r0 = io_uring_setup(0x2ae7, &(0x7f0000000000)={0x0, 0xa9f, 0x4, 0x3, 0x2ed}) r1 = eventfd2(0xf9e6, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080)=r1, 0x1) socket$kcm(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}}, 0x10) 07:35:18 executing program 3: socket$kcm(0x29, 0x2, 0x7000000) 07:35:18 executing program 5: socket$kcm(0x29, 0x7, 0x0) 07:35:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f00000001c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x0, 0x2}, 0xffffffffffffff63}, 0x1, 0x0, 0x0, 0x20049850}, 0x800) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x840) socket$kcm(0x29, 0x2, 0x0) 07:35:18 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x501802) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x4, 0x4}, {0x5}, 0x297694f6, 0x4, 0x3f}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f00000000c0)={{0xfd, 0x8}, {0x5f, 0x81}, 0x4, 0x1, 0x6}) socket$kcm(0x29, 0x3, 0x0) 07:35:18 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x60) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000100)={{0x0, 0x3}, {0x7f, 0xff}, 0x80000000, 0xd, 0x3}) 07:35:18 executing program 3: socket$kcm(0x29, 0x2, 0xfeffffff) 07:35:18 executing program 2: socket$kcm(0x29, 0x0, 0x0) 07:35:18 executing program 1: socket$kcm(0x29, 0x7, 0x0) 07:35:18 executing program 5: socket$kcm(0x29, 0x5, 0x0) 07:35:18 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40004008}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x40) 07:35:18 executing program 0: exit(0x4) exit(0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x202000) exit(0x5) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000000c0)={{0x3, 0x7}, 'port1\x00', 0x80, 0x2, 0x5, 0x2, 0x7fffffff, 0x40, 0x5, 0x0, 0xd, 0xff}) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000000)={{0x3f, 0x2}, {0x4, 0x7f}, 0x200, 0x3, 0x80}) 07:35:18 executing program 3: socket$kcm(0x29, 0x2, 0xfffffffe) 07:35:18 executing program 1: setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000001300)=0x3, 0x4) r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f00000012c0)={&(0x7f0000000040)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/135, 0x87}, {&(0x7f0000000180)=""/243, 0xf3}], 0x2, &(0x7f00000002c0)=""/4096, 0x1000}, 0x10000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) 07:35:18 executing program 2: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002b03000000dbdf250d000000080031000200000008002bfe000000000005002a00000000000b033100cb0700000000380001000000060028006a027722fe04154353617a2cfef252d1e60d5f923b50f9a15e8e4620269f3ae403498b7295f7736a593dd2063deb81be8eb8f76b1148d97e809a24"], 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x48850) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00', r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000045}, 0x4000000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6bd}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x480d1) socket$kcm(0x29, 0x2, 0x0) 07:35:18 executing program 5: socket$kcm(0x29, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x4001) 07:35:18 executing program 4: getresuid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x4b0b41) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000140)={{0xff, 0x8}, 'port1\x00', 0x71dee80a2714861c, 0x10000, 0x80, 0x6, 0x2, 0xb1, 0xff, 0x0, 0x4}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000040)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000240)) socket$kcm(0x29, 0x2, 0x0) 07:35:18 executing program 3: socket$kcm(0x29, 0x5, 0x0) 07:35:19 executing program 2: socket$kcm(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c000}, 0x810) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0x7e86, 0x8) 07:35:19 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000040)=0x18) socket$kcm(0x29, 0x2, 0x0) 07:35:19 executing program 3: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@private, @in=@loopback}}, {{@in=@private}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x1000000000000, 0xfffff000}) 07:35:19 executing program 2: syz_open_dev$mouse(&(0x7f0000002440)='/dev/input/mouse#\x00', 0x40, 0x800) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000002540)={{0x3e, 0x6}, 'port0\x00', 0x0, 0x181040, 0x7dffffff, 0x0, 0xd3, 0x6d35, 0x7, 0x0, 0x1, 0x4c}) socketpair(0x1d, 0x4, 0x40, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001640)={'batadv0\x00'}) recvmsg$kcm(r1, &(0x7f0000001600)={&(0x7f0000000040)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/152, 0x98}, {&(0x7f0000000180)=""/159, 0x9f}, {&(0x7f0000000240)=""/227, 0xe3}, {&(0x7f0000000340)=""/223, 0xdf}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/208, 0xd0}], 0x6, &(0x7f00000015c0)=""/18, 0x12}, 0x60000002) recvmsg$kcm(r2, &(0x7f0000001f40)={&(0x7f0000001680)=@ipx, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001700)=""/213, 0xd5}, {&(0x7f0000001800)}, {&(0x7f0000001840)=""/100, 0x64}, {&(0x7f00000018c0)=""/236, 0xec}, {&(0x7f00000019c0)=""/128, 0x80}, {&(0x7f0000001a40)=""/10, 0xa}, {&(0x7f0000001a80)=""/104, 0x68}, {&(0x7f0000001b00)=""/162, 0xa2}, {&(0x7f0000001bc0)=""/219, 0xdb}, {&(0x7f0000001cc0)=""/174, 0xae}], 0xa, &(0x7f0000001e40)=""/216, 0xd8}, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001800)='/proc/sysvipc/sem\x00', 0x0, 0x0) recvmsg$can_raw(r3, &(0x7f00000029c0)={&(0x7f0000002000)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000022c0), 0x0, &(0x7f0000002300)=""/197, 0xc5}, 0x40) socket$kcm(0x29, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r4, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) recvmsg$can_bcm(r4, &(0x7f0000002980)={&(0x7f0000002480)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002900)=[{&(0x7f0000002500)=""/21, 0x15}, {&(0x7f0000002600)=""/249, 0xf9}, {&(0x7f0000002700)=""/131, 0x83}, {&(0x7f00000027c0)=""/30, 0x1e}, {&(0x7f0000002800)=""/2, 0x2}, {&(0x7f0000002840)=""/155, 0x9b}], 0x6}, 0x2000) 07:35:19 executing program 4: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4004040) socket$kcm(0x29, 0x2, 0x0) 07:35:19 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) bind$can_raw(r1, 0x0, 0xffffffffffffffba) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002240)={0x0, @can={0x1d, 0x0}, @nfc={0x27, 0x0, 0x2, 0x4}, @in={0x2, 0x4e22, @loopback}, 0x7, 0x0, 0x0, 0x0, 0xdda5, &(0x7f0000002200)='bridge0\x00', 0x100000001, 0x1, 0x7}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000022c0)={0x1d, r3}, 0x10) 07:35:19 executing program 3: socket$kcm(0x29, 0x2, 0x0) 07:35:19 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000000)=@alg, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/209, 0xd1}, {&(0x7f0000000180)=""/6, 0x6}], 0x2, &(0x7f0000000200)=""/106, 0x6a}, 0x2000) 07:35:19 executing program 5: socket$kcm(0x29, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/242, 0xf2}, {&(0x7f0000000180)=""/133, 0x85}, {&(0x7f0000000240)=""/27, 0x1b}], 0x3}, 0x100) 07:35:19 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0xe0, 0x1e}, 'port1\x00', 0xbc, 0x1, 0x40, 0x6e6b, 0x0, 0x3ff, 0x5, 0x0, 0x2, 0x4}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @generic={0x26, "cb564071830151996df419d1398e"}, @rc={0x1f, @fixed={[], 0x12}, 0xff}, @qipcrtr={0x2a, 0x4, 0x7fff}, 0xff21, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)='team0\x00', 0x3, 0x1ff, 0x5}) 07:35:19 executing program 3: socket$kcm(0x29, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000000)={0x9, 0xe6, 0x1, 'queue1\x00', 0x1000}) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000100)={{0x1f}, 0x1, 0xb9, 0x7, {0x7f, 0x6}, 0x8, 0xffff8000}) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000180)) socketpair(0x5, 0x80000, 0x1000, &(0x7f0000000240)) 07:35:19 executing program 4: socket$kcm(0x29, 0x2, 0x0) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 07:35:19 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) bind$can_raw(r0, 0x0, 0x18) 07:35:19 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000000)={0x2dcd, 0x2, {0x3, 0x1, 0xffe, 0x2, 0x10000}, 0x2001}) 07:35:20 executing program 3: socket$kcm(0x29, 0x2, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x50, 0xffffffffffffffff, 0x10000000) 07:35:20 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000080)={0x3, 0x5, 0x4, 0x400, 0x0, {0x77359400}, {0x4, 0x2, 0x1, 0xc5, 0x2e, 0x1f, "c40af791"}, 0x2, 0x1, @planes=&(0x7f0000000040)={0x6f, 0x2, @mem_offset, 0xfffff801}, 0x5, 0x0, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x7a, 0x2, 0x4, 0x0, 0x6, {r2, r3/1000+10000}, {0x4, 0x8, 0x7, 0x1a, 0x0, 0x7, "a7cbc6de"}, 0xffffffff, 0x2, @offset=0x5c27, 0x64ca, 0x0, r1}) socket$kcm(0x29, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x10000000) r4 = eventfd2(0x80, 0x80001) write$eventfd(r4, &(0x7f0000000180)=0x100000001, 0x8) 07:35:20 executing program 4: socket$kcm(0x29, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) fork() 07:35:20 executing program 3: socket$kcm(0x29, 0x2, 0x0) 07:35:20 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_io_uring_setup(0x38c7, &(0x7f0000001500)={0x0, 0x1f97, 0x20, 0x3, 0x5, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000001580), &(0x7f00000015c0)) r2 = syz_open_dev$mouse(&(0x7f00000013c0)='/dev/input/mouse#\x00', 0x200, 0x121540) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000001400)={{0x5, 0x1f}, {0x1}, 0x10001, 0x3, 0x7b}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000080)=""/9, 0x9}, {&(0x7f00000000c0)=""/182, 0xb6}, {&(0x7f0000000180)=""/7, 0x7}, {&(0x7f00000001c0)=""/211, 0xd3}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/19, 0x13}], 0x6}, 0x12041) syz_open_dev$mouse(&(0x7f00000014c0)='/dev/input/mouse#\x00', 0x50, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001480)={'batadv0\x00'}) 07:35:20 executing program 1: socket$kcm(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200400}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000fddbdf250500000005002d000000000008000600", @ANYRES32=0x0, @ANYBLOB="f0a5580706339784da75", @ANYRES32=0x0, @ANYBLOB="08002c00080000000800340001000080"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="f14af36fd39cdc427bbd9810e2f0cc3291591424429977c4908c3d22237857d7a5a2e5348eb00000000000000000", @ANYRES16=0x0, @ANYBLOB="000429bd7000ffdbdf250400000005003800000000000800390029c20000"], 0x24}, 0x1, 0x0, 0x0, 0x80050}, 0x40000) 07:35:20 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000001, 0x100010, r0, 0x8000000) 07:35:20 executing program 3: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="24e6c3ed4d043a77e74d04f1f5ca6b5e817b97e1f1d0bb0475582abbffc0d66a8957bb8a28b9a3f51f931fb00855f15c901e47c503b0a653b433ee70cb5ae717b0660914a12e082fa1c50369a12aeb57df8ee0c2dbde372d530e37c49d15", 0x5e, 0xffffffffffffffff) socket$kcm(0x29, 0x2, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00022cbd7000fbdbdf250600000008003c000900000005002a00010000001cbdd22f5734be7456c9b8555823e83a7704270b366940f6d25668d4a4cb0ff42efa9bd001106d261364b7ebf66e73bf1eaf2f6eb8837291eebaf70dabcdd5df4050f9b97bf9a3852ded97a7b736eae63958c8"], 0x24}}, 0x4000800) 07:35:20 executing program 2: socket$kcm(0x29, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000000)={0x100, 0x2, {0xffffffffffffffff, 0x7c36c5c88d13f235, 0x100, 0x0, 0x7}, 0x20}) 07:35:20 executing program 5: mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000000, 0x10, 0xffffffffffffffff, 0x9) socket$kcm(0x29, 0x2, 0x0) 07:35:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x324, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x64, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47f89b0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x416b487a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12f9e746}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbc861d8}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f3c70e2}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x44, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d258347}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5661}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa525}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d5b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ec6b8ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4cbf9928}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11658069}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x14c, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2cbe70f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b76beff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x405dd746}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1687b6c6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36dde42c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6641ccad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3feb0282}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xab1f8a1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27a3f6ad}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d28d876}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x235f0e93}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5de66e5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52c1d1e9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e8acd94}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3fd70e6c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f0de156}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29cf2c46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25c4d696}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x771f93f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19ec23fe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcdc3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52300ec3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x4}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x48, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc16c2b9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a05}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74cdc46a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd124}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x83f5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfd4c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcb40}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x98, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1b50}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaf03}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c825f2d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x77a6}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b593072}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7dfc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x81b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfe68f83}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc5d4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb547}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x321c35e3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x483be8ea}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f608fca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fb458fe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x612f24b4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x540f8af9}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x324}, 0x1, 0x0, 0x0, 0x10}, 0x8000) socket$kcm(0x29, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000400)={'wpan1\x00'}) 07:35:20 executing program 5: socket$kcm(0x29, 0x0, 0x0) 07:35:20 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x148000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x2, 0x3}, {0x81, 0x1f}, 0x80000000}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0x6, 0x3}, {0x40, 0x3}, 0x3, 0x6, 0x1f}) socket$kcm(0x29, 0x7, 0x0) 07:35:20 executing program 2: socket$kcm(0x29, 0x7, 0x0) 07:35:20 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000100)={0x64, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0xab}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x64}}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00', r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000000)) 07:35:20 executing program 1: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002800)='/proc/cpuinfo\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000002900)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6d03}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 07:35:20 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x2a37, &(0x7f0000000000)={0x0, 0x8e6a, 0x20, 0x3, 0x3b6}) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r1, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x618000, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r3, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) init_module(&(0x7f0000000100)='/dev/kvm\x00', 0x9, &(0x7f0000000140)='/dev/kvm\x00') io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r3], 0x7) 07:35:21 executing program 5: socket$kcm(0x29, 0x2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x80100, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) r2 = fork() migrate_pages(r2, 0x32, &(0x7f0000000080)=0x8000, &(0x7f00000000c0)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000040)={r1, 0x5, 0xff, r3}) 07:35:21 executing program 4: socket$kcm(0x29, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000000)={0x1, 0xff, 0xa2}) 07:35:21 executing program 2: socket$kcm(0x29, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r2, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40804) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r1, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x81}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x38}}, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000000)={0x6, 0x0, 'client0\x00', 0x0, "e0b5ccd5272c02ad", "c7cd7c57d30f2424f9379f28f0c7d96de7f73313652b97b242903b122b9849b2", 0x9, 0x7628}) 07:35:21 executing program 1: socket$kcm(0x29, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xfffffffffffffff7, 0x80401) 07:35:21 executing program 4: socket$kcm(0x29, 0x2, 0x0) init_module(&(0x7f0000000000)='\x00', 0x1, &(0x7f0000000040)='\x00') socketpair(0x1d, 0x80000, 0x7fffffff, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$kcm(r0, &(0x7f0000000400)={&(0x7f00000000c0)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)=""/203, 0xcb}, {&(0x7f0000000240)=""/223, 0xdf}], 0x2, &(0x7f0000000380)=""/114, 0x72}, 0x40000000) 07:35:21 executing program 3: socket$kcm(0x29, 0x0, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x300, 0x70bd23, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x7, 0xb, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0xc894}, 0x4010) 07:35:21 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048010}, 0x40819) socket$kcm(0x29, 0x2, 0x0) 07:35:21 executing program 2: ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000040)) socket$kcm(0x29, 0x2, 0x0) 07:35:21 executing program 4: socket$kcm(0x29, 0x5, 0x0) 07:35:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000240)='NET_DM\x00', r0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@loopback, @in6=@private2}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffd15e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x140000c0}, 0x40) 07:35:21 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x2, 0x0, 0x1, 0x1}, {0x2}}, {{0x4, 0x0, 0x1, 0x1}, {0x2, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x3, 0x1}}, {{0x0, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}], 0x30) socket$kcm(0x29, 0x2, 0x0) 07:35:22 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) socketpair(0x2b, 0x80000, 0x20, &(0x7f0000000200)={0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/vmallocinfo\x00', 0x0, 0x0) recvmsg$can_bcm(r1, &(0x7f0000000500)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000080)=""/236, 0xec}, {&(0x7f0000000240)=""/152, 0x98}, {&(0x7f0000000180)=""/27, 0x1b}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f0000000340)=""/123, 0x7b}, {&(0x7f00000003c0)=""/155, 0x9b}, {&(0x7f0000000580)=""/235, 0xeb}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/233, 0xe9}, {&(0x7f0000001800)=""/118, 0x76}], 0xb, &(0x7f0000000680)=""/76, 0x4c}, 0x1000) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/slabinfo\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)=ANY=[@ANYBLOB="05d9ea7d", @ANYRES16=0x0, @ANYBLOB="0a0028bd7000fcdbdf2511000000050038000000000008003c000010000008003400010000000a000900ffffffffffff0000"], 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x0) syz_open_dev$mouse(&(0x7f0000002fc0)='/dev/input/mouse#\x00', 0x4, 0x0) r5 = socket$inet6(0xa, 0x6, 0x400) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000001a40)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f0000001b40)=0xe8) socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001b80)='/proc/mdstat\x00', 0x0, 0x0) recvmsg$kcm(r7, &(0x7f0000001dc0)={&(0x7f0000001bc0)=@can, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001c40)=""/68, 0x44}], 0x1, &(0x7f0000001d00)=""/139, 0x8b}, 0x12041) bind$can_raw(r6, 0x0, 0x0) 07:35:22 executing program 3: socket$kcm(0x29, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000000)={{0x8, 0x6}, 'port1\x00', 0x80, 0x161434, 0xc1, 0x0, 0xffffef03, 0x762a, 0x9, 0x0, 0x2, 0x8}) 07:35:22 executing program 4: socket$kcm(0x29, 0x2, 0x0) read$qrtrtun(0xffffffffffffffff, &(0x7f0000000040)=""/48, 0x30) get_robust_list(0x0, &(0x7f0000000180)=&(0x7f0000000140)={&(0x7f00000000c0)={&(0x7f0000000080)}, 0x0, &(0x7f0000000100)}, &(0x7f00000001c0)=0x18) clock_getres(0x1, &(0x7f0000000000)) 07:35:22 executing program 5: socket$kcm(0x29, 0x2, 0x0) socketpair(0x18, 0x800, 0x5, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r0, &(0x7f00000016c0)={&(0x7f00000004c0)=@l2tp6, 0x80, &(0x7f0000001600)=[{&(0x7f0000000540)=""/134, 0x86}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x2, &(0x7f0000001640)=""/72, 0x48}, 0x40010052) 07:35:22 executing program 2: socket$kcm(0x29, 0x2, 0x0) 07:35:22 executing program 1: io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000), 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @phonet={0x23, 0x2, 0x2, 0xff}, @xdp={0x2c, 0x4, 0x0, 0x9}, @nl=@unspec, 0x1ff, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='lo\x00', 0x4, 0xc386, 0x86}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000) 07:35:22 executing program 4: ptrace$peeksig(0x4209, 0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x1}, &(0x7f0000000040)=[{}]) r0 = fork() ptrace$peeksig(0x4209, r0, &(0x7f00000000c0)={0x7, 0x1, 0x2}, &(0x7f0000000100)=[{}, {}]) socket$kcm(0x29, 0x2, 0x0) 07:35:22 executing program 2: socket$kcm(0x29, 0x2, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x40010, 0xffffffffffffffff, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0xfffffffffffffffe, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r1, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004800}, 0x4) 07:35:22 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) socketpair(0x6, 0x1, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', r2) 07:35:22 executing program 5: socket$kcm(0x29, 0x0, 0x0) 07:35:22 executing program 1: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000040)={0x0, 0x0, 0x0, [], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x16) 07:35:22 executing program 0: init_module(&(0x7f0000000000)='\xbb\xff\xff\xff', 0x4, &(0x7f0000000100)) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000100)={{0x8f, 0x3}, {0xde, 0x22}, 0x7fffffff, 0x4, 0x6}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) init_module(&(0x7f0000000080)='^&\x00', 0x3, &(0x7f00000000c0)='/proc/tty/drivers\x00') setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) 07:35:22 executing program 2: socket$kcm(0x29, 0x2, 0x0) prctl$PR_GET_KEEPCAPS(0x7) 07:35:22 executing program 5: socket$kcm(0x29, 0x0, 0x0) 07:35:22 executing program 4: socket$kcm(0x29, 0x7, 0x0) sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x3) 07:35:22 executing program 3: socket$kcm(0x29, 0x7, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) write$eventfd(r0, &(0x7f0000000000)=0x8, 0x8) 07:35:22 executing program 2: socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x82900) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/partitions\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x8, 0x404000) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x20010, r1, 0x8000000) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000140), 0x4) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0xc4000) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000040)={{0x80, 0x1}, 'port1\x00', 0x19, 0x141042, 0xffff, 0xfca, 0x2, 0x0, 0x0, 0x0, 0x4, 0x80}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000100), 0x10) getrusage(0x1dc6a42122ca7513, &(0x7f0000000200)) 07:35:22 executing program 1: socket$kcm(0x29, 0x7, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000000)={0x4589, 0x1000, 0x7, 0x0, 0xd088}) 07:35:22 executing program 5: socket$kcm(0x29, 0x1, 0x0) 07:35:22 executing program 4: io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)=""/115, 0x73}, {&(0x7f0000000080)=""/72, 0x48}, {&(0x7f0000000100)=""/91, 0x5b}, {&(0x7f0000000180)=""/50, 0x32}, {&(0x7f00000001c0)=""/103, 0x67}, {&(0x7f0000000480)=""/62, 0x3e}, {&(0x7f00000003c0)=""/174, 0xae}, {&(0x7f0000000700)=""/243, 0xf3}, {&(0x7f0000000580)=""/15, 0xf}, {&(0x7f00000005c0)=""/97, 0x61}], 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xbd0}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040044) 07:35:22 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000080)={0x7, 0x7, 0xaf}) r0 = io_uring_setup(0x41ac, &(0x7f0000000000)={0x0, 0xfc4f, 0x20, 0x1, 0x36d}) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f00000002c0)={0x67, 0x10000, 0xffffffff}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) r3 = socket$kcm(0x29, 0xfbe3b03f4458de5a, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={0x0, @vsock={0x28, 0x0, 0xffffffff, @host}, @sco, @l2tp={0x2, 0x0, @loopback, 0x4}, 0x5, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x9, 0x8000, 0xff01}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 07:35:22 executing program 3: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x32}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 07:35:22 executing program 1: socket$kcm(0x29, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000000)) 07:35:22 executing program 5: r0 = io_uring_setup(0x5b39, &(0x7f0000000000)={0x0, 0x9fa1, 0x4, 0x0, 0x209}) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r3, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r4, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r6, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff, r5, r6], 0xa) 07:35:22 executing program 2: io_uring_enter(0xffffffffffffffff, 0x2e6f, 0x2bfa, 0x3, &(0x7f0000000100)={[0x5]}, 0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x518f, &(0x7f0000000140)={0x0, 0x48f9, 0x20, 0x0, 0x39}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r2 = syz_io_uring_setup(0x69b, &(0x7f0000000240)={0x0, 0xac71, 0x2, 0x2, 0x1a2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x1010, r1, 0x10000000) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x20, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x2) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400)='nl802154\x00', r0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) io_uring_enter(r6, 0x2a64, 0x1618, 0x1, &(0x7f0000000500)={[0x7]}, 0x8) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r5, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x48845}, 0x0) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r8, &(0x7f0000001140)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x10000000000001e6}, 0x0) r9 = eventfd(0x1) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000380)=[r7, r1, r3, r2, 0xffffffffffffffff, r8, r1, r9, r3], 0x9) 07:35:22 executing program 4: socket$kcm(0x29, 0x5, 0x0) 07:35:22 executing program 1: r0 = io_uring_setup(0x530c, &(0x7f0000000000)={0x0, 0x65fa, 0x1, 0x1, 0x1a6}) r1 = io_uring_setup(0xc2c, &(0x7f0000000080)={0x0, 0x900d, 0x20, 0x3, 0x344, 0x0, r0}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) 07:35:22 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x208400, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) 07:35:22 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x101000) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x5, 0xa, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x4, 0x8, 0x7, 0x7, 0xd0, 0x7, "dff01a7d"}, 0x4, 0x3, @planes=&(0x7f0000000040)={0x401, 0x3, @fd, 0xa8}, 0x3}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000140)={{0x1, 0x3}, 0x0, 0x1, 0x400, {0x30, 0xdf}, 0x8, 0x1000}) socket$kcm(0x29, 0x2, 0x0) 07:35:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00', 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2a05c81921e67fcd}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:restorecond_var_run_t:s0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x4000c) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000), 0x4) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f00000001c0), 0x4) socket$kcm(0x29, 0x2, 0x0) 07:35:22 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) 07:35:23 executing program 2: exit_group(0x8) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xffffffffffffffe9, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="f2584dd5b7ee0c5562c9f59b577902708732715c50bec292532c2b35a430c8747b9eb7a810b7cd73ac9b45c18a75bc566e243db19aa8cdb85e29c76f2ff698e242a50ea0e8479c1dc75db7eddc9009ae21820028bbadf1582aa97e23bb24b14572fa084a0657fb9a7c7723b88f0232f459a195e2143546e6f80c1f65f36c7adb69f31cfe194b8cc36751f90b36fce76edfd17e023393b7554524897f49c71f3c2530c6f88d18b401acd9a8e1ae44006ba86a367a88d47d480ef92f814a3f458042ba868b4d18a0cb7b112bc9066a4c0f54a7440ee2539b5a071f8f235cd2d8a4f2ff38f26c6af67b1b129238", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fcdbdf2505000000050037000100000008000b00b60b0000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40040c1) socket$kcm(0x29, 0x2, 0x0) 07:35:23 executing program 3: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20040801) socket$kcm(0x29, 0x5, 0x0) 07:35:23 executing program 1: socket$kcm(0x29, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x40011}, 0x24008001) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fbdbdf250100000008000200020000000380510148bef8ff559b0c8e753d9c9d3840c7498bc7e09a45737f45b36e70dcb970ee78"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 07:35:23 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x222df197ccf99081}, 0x0) 07:35:23 executing program 5: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) 07:35:23 executing program 4: socket$kcm(0x29, 0x5, 0x0) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000000)=0x1000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000380)='/dev/input/mouse#\x00', 0x7fffffff, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/handlers\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0xa, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@loopback, @in6=@ipv4={[], [], @empty}}}, {{@in6=@private2}, 0x0, @in=@private}}, &(0x7f0000000340)=0xe8) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x440000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x80000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, &(0x7f0000000040)={0x0, 0x0, 0x0, [], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x22) 07:35:23 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) 07:35:23 executing program 1: socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @isdn={0x22, 0x80, 0x3, 0x9f}, @isdn={0x22, 0x6, 0x20, 0x1, 0x1}, @can, 0xffff, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x20, 0x1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x8010, 0xffffffffffffffff, 0x8000000) 07:35:23 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) socketpair(0x2, 0x4, 0x9, &(0x7f0000001f00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000000)={0x4}) socket$kcm(0x29, 0x3, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x1, 0x101002) recvmsg$kcm(r3, &(0x7f00000005c0)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)=""/120, 0x78}, {&(0x7f0000000400)=""/231, 0xe7}], 0x2, &(0x7f0000000540)=""/111, 0x6f}, 0x80b28e9439d6b1ea) 07:35:23 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000080)=""/107, 0x6b}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/20, 0x14}], 0x3}, 0x40000101) 07:35:23 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x4e22, @empty}, @qipcrtr={0x2a, 0x4, 0x8000}, @can, 0x0, 0x0, 0x0, 0x0, 0x8e5f, &(0x7f0000000000)='veth0_to_hsr\x00', 0x5, 0x7fff, 0xa9d0}) 07:35:23 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @qipcrtr={0x2a, 0x1, 0x7fff}, @isdn={0x22, 0x3, 0xb2, 0xff, 0x20}, @hci={0x1f, 0x2, 0x2}, 0x1ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x8}) 07:35:23 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)={0x2, 0x1, {0x2, 0x2, 0x6, 0x3, 0x400}, 0x8000}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) 07:35:23 executing program 1: socket$kcm(0x29, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000000)) 07:35:23 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x80000) socketpair(0x1a, 0x800, 0x1, &(0x7f0000000480)={0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@ipv4={[], [], @local}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@dev}}, &(0x7f0000000840)=0xe8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000940)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x54, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000000}, 0x4008010) r3 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r3, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r4, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4], 0x6) socket$kcm(0x29, 0x2, 0x0) [ 294.670554][T20836] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 07:35:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "54005b6d3ef423b2d5abb595675a4e169acb0680992042372fa212054d79dde5"}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008001}, 0x20040000) socket$kcm(0x29, 0x4, 0x0) 07:35:24 executing program 1: socket$kcm(0x29, 0x5, 0x0) 07:35:24 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000180)={0x7f, 0x1000, "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"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000000c0)={0x9, 0x1, 'client0\x00', 0x2, "05e43d83e680e634", "13681a08eaf9c18eba4a371ea6915708289600", 0x8, 0x3}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{0x3f, 0x8}, {0x1f}, 0x2, 0x4, 0x80}) socket$kcm(0x29, 0x2, 0x0) 07:35:24 executing program 0: socket$can_raw(0x1d, 0x3, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001640)='/dev/input/mouse#\x00', 0x6, 0x1) bind$can_raw(r0, 0x0, 0xffffffffffffff5e) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000000)) 07:35:24 executing program 2: socket$kcm(0x29, 0x424d69f3c581d5c9, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000000)={0x9817, 0x80000000, 0x0, 'queue0\x00', 0x1}) 07:35:24 executing program 5: socket$kcm(0x29, 0x5, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) 07:35:24 executing program 1: socket$kcm(0x29, 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)={0x0, 0x6, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f254c276"}}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000001}]}, 0x34}}, 0x40000) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000000)={0x1, 0xa, 0x4, 0x4, 0x1, {0x0, 0x2710}, {0x1, 0x1, 0x81, 0x1, 0xff, 0x8, "1bc3b7f7"}, 0x200, 0x3, @offset=0x7fffffff, 0x8, 0x0, r0}) 07:35:24 executing program 2: socket$kcm(0x29, 0x2, 0x0) socketpair(0x28, 0xa, 0x20, &(0x7f00000006c0)) socketpair(0x1a, 0x800, 0x9, &(0x7f0000000100)) r0 = syz_open_dev$mouse(&(0x7f0000003040)='/dev/input/mouse#\x00', 0x3ff, 0x80080) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @empty}, @in=@loopback}}, {{@in6=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000800)=0xe8) 07:35:24 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb6b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x42}, 0x400c040) 07:35:24 executing program 4: socket$kcm(0x29, 0x2, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4f, 0x24000) recvmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000040)=@ax25={{0x3, @null}, [@rose, @bcast, @default, @remote, @netrom, @bcast, @remote, @rose]}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/33, 0x21}], 0x1, &(0x7f0000000140)}, 0x10000) 07:35:24 executing program 5: sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) socket$kcm(0x29, 0x2, 0x0) 07:35:24 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000328bd7000fedbdf2501000000d300011e0000000008000200020000000800020002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20040001) fork() socket$kcm(0x29, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f0000000500)={&(0x7f0000000140)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/175, 0xaf}, {&(0x7f0000000280)=""/250, 0xfa}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/42, 0x2a}], 0x4}, 0x10040) socket$kcm(0x29, 0x2, 0x0) 07:35:24 executing program 2: socket$kcm(0x29, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00', r0) 07:35:24 executing program 0: ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000000)={0x586, 0x7, 0x1, 'queue1\x00', 0x9}) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfffffffeffffffff, 0x40180) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000100)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000140)={{0xc1, 0x4}, 'port1\x00', 0x18, 0x4, 0x3ff, 0xfffffffe, 0x9, 0x3, 0x81, 0x0, 0x4, 0x5}) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) 07:35:24 executing program 4: socket$kcm(0x29, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000880)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000900)=""/10, 0xa}, {&(0x7f0000000940)=""/118, 0x76}, {&(0x7f00000009c0)=""/74, 0x4a}, {&(0x7f0000000a40)=""/249, 0xf9}, {&(0x7f0000000b40)=""/77, 0x4d}, {&(0x7f0000000bc0)=""/136, 0x88}, {&(0x7f0000000c80)=""/178, 0xb2}], 0x7, &(0x7f0000000dc0)=""/29, 0x1d}, 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e80)='batadv\x00', 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001fc0)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000020c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000004980)='batadv\x00', r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000049c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000004a80)={&(0x7f0000004940), 0xc, &(0x7f0000004a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="7447166d6a09b19e02000000", @ANYRES16=r4, @ANYBLOB="040027bd7000fddbdf250500000008000300", @ANYRES32=r5, @ANYBLOB="08003b0002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4040090}, 0xc000) sysinfo(&(0x7f0000000040)=""/157) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000002180)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)=ANY=[@ANYBLOB="37cf0443", @ANYRES16=r1, @ANYBLOB="000325ad7000fedbdf250c00000208000601", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3d0d}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40844}, 0x40) 07:35:24 executing program 3: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80010}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180)='802.15.4 MAC\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x2004c854) socket$kcm(0x29, 0x2, 0x0) 07:35:24 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x34, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x24040010) 07:35:24 executing program 2: r0 = fork() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x8, &(0x7f0000000100)=""/147) r1 = fork() ptrace(0x8, r1) r2 = fork() ptrace$getregs(0xe, r2, 0x8, &(0x7f0000000200)=""/117) socket$kcm(0x29, 0x5, 0x0) sched_getaffinity(r0, 0x8, &(0x7f00000001c0)) r3 = syz_io_uring_setup(0x244b, &(0x7f0000000000)={0x0, 0xf6c4, 0x10, 0x1, 0xf7}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000b, 0x20811, r3, 0x8000000) 07:35:25 executing program 5: socket$kcm(0x29, 0x2, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x200, 0x1000000000, 0x23}, 0x3}, 0x20, 0x0, 0x0) 07:35:25 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000040)=0x8) 07:35:25 executing program 4: socket$kcm(0x29, 0x5, 0x0) 07:35:25 executing program 1: socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000000)=@generic, 0x80, &(0x7f0000000680)=[{&(0x7f0000000080)=""/233, 0xe9}, {&(0x7f0000000180)=""/210, 0xd2}, {&(0x7f0000000280)=""/233, 0xe9}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000480)=""/77, 0x4d}, {&(0x7f0000000500)=""/108, 0x6c}, {&(0x7f0000000580)=""/63, 0x3f}, {&(0x7f00000005c0)=""/121, 0x79}, {&(0x7f0000000640)=""/53, 0x35}], 0x9, &(0x7f0000000740)=""/203, 0xcb}, 0x40002020) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@loopback, @in6=@private2}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000980)=0xe8) r0 = syz_open_dev$mouse(&(0x7f0000000ac0)='/dev/input/mouse#\x00', 0x3, 0x4100) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000c40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10830}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x183}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400c8d0}, 0x80040) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000c00)={&(0x7f0000000b00), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, r1, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8044}, 0x4000894) socketpair(0xa, 0x3, 0x5, &(0x7f00000009c0)) 07:35:25 executing program 3: socket$kcm(0x29, 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0xfe, 0x2, 0x4, 0xe000, 0xfffffbff, {0x77359400}, {0x2, 0x2, 0x6, 0x6, 0x3, 0x20, "cc55b703"}, 0xffffffff, 0x1, @planes=&(0x7f0000000000)={0x1, 0xb3, @mem_offset=0xd3, 0x7}, 0x100, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x9, 0x4, 0x4, 0x7fffffff, {0x77359400}, {0x1, 0x1, 0x81, 0x1f, 0x0, 0x6, "8a344135"}, 0x100, 0x2, @userptr=0xda5, 0x100, 0x0, r0}) 07:35:25 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000040)=@phonet, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2, &(0x7f0000000200)=""/156, 0x9c}, 0x120) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) bind$can_raw(r2, 0x0, 0x0) sysfs$3(0x3) 07:35:25 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000014c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80}, 0x10142) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000017c0)=[{{0x1, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}], 0x8) socket$kcm(0x29, 0x0, 0x0) 07:35:25 executing program 4: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000001600)=[{&(0x7f0000000080)=""/195, 0xc3}, {&(0x7f0000000180)=""/79, 0x4f}, {&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000440)=""/207, 0xcf}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/160, 0xa0}], 0x6, &(0x7f0000001680)=""/165, 0xa5}, 0x2002) socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/crypto\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x24040005) 07:35:25 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000006a80)={0x0, @ipx={0x4, 0x8000, 0x7d, "061db3982fce", 0xfc}, @xdp={0x2c, 0x2, 0x0, 0x25}, @sco={0x1f, @none}, 0x4c69, 0x0, 0x0, 0x0, 0x9ab, &(0x7f0000006a40)='netpci0\x00', 0x0, 0x7}) bind$can_raw(0xffffffffffffffff, &(0x7f0000006b00)={0x1d, r1}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r2, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) connect$can_bcm(r2, &(0x7f0000000000), 0x10) 07:35:25 executing program 1: socket$kcm(0x29, 0x2, 0x0) 07:35:25 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0xffffffffffffff59) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000), 0x4) 07:35:25 executing program 2: socket$kcm(0x29, 0x2, 0x0) syz_usb_connect$uac1(0x0, 0x119, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x107, 0x3, 0x1, 0x81, 0x0, 0xbe, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1000, 0x3}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x206, 0x1, 0x8, 0x3ff, 0x2, 0x9}, @extension_unit={0x9, 0x24, 0x8, 0x6, 0x4, 0x80, "41ad"}, @feature_unit={0x11, 0x24, 0x6, 0x2, 0x2, 0x5, [0xa, 0x7, 0x201ac9b4b8bf3a66, 0x6, 0x8], 0x7f}, @selector_unit={0xb, 0x24, 0x5, 0x3, 0x7d, "dbd01ea5343d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x20, 0x7f, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6, 0x90f, 0x3f, "127964daada0"}, @as_header={0x7, 0x24, 0x1, 0x81, 0x2, 0x2}, @as_header={0x7, 0x24, 0x1, 0x2, 0xff, 0x4}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x7, 0x2, 0xf5, 0x4, "862e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xad, 0x4, 0x4, {0x7, 0x25, 0x1, 0x80, 0x7f, 0x400}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x1, 0x100, 0x1f, "f621c7fdfba5973fde"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5c, 0x1, 0x5, 0x20, "", "babf77"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x20, 0x3, 0x9, 0x1, "9029cafbd612"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xbe, 0x3, 0x9, 0x4, "c576b5", '/'}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2, 0xff60, 0x7, "356311e1b91776c114"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x7, 0x80, 0x1, {0x7, 0x25, 0x1, 0x83, 0x7, 0x1ff}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x6, 0x40, 0x8, 0xff, 0x6}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x1, [@generic={0x4b, 0x10, 0x2, "9695b1374d9412bb071e7a5a4623a8174ae879b1b8d356614361f02c17f075b056c21e2a0e28b8b11fc8e44d46d60c5a2771bcdceafe1700a7c3740e97801c60ba79791f838986a0"}]}, 0x3, [{0x20, &(0x7f0000000200)=@string={0x20, 0x3, "30700ccaa7605e63d3f864ff5cecefb057afe788f0a9cf39a127bb6234fc"}}, {0x65, &(0x7f0000000240)=@string={0x65, 0x3, "ac565957dfa5affb81fd2abf4c07fbc6508feba044be955aecaa18fec63679fa5062f461af1b5b38b0818bc0c1177760c27754e860ce9114ca5407341bdaa35c4665ce593f40478b0cf99a0ad780dbcf93d17fd462d02a769f7fc4e0a466c1f0580441"}}, {0x48, &(0x7f00000002c0)=@string={0x48, 0x3, "a3ffa46cc1ecd33cbaa83c79b358c7b7b96a3f5dac482b241465f954ad3f51d80ac4ef7a2f33f783b4d9fc7695a3cde1ed3fdc0d6b5113087143527cf3bce581668351be9663"}}]}) 07:35:25 executing program 4: ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000000)={0xf276, 0x9, 0xfffff3e0}) socket$kcm(0x29, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000080)) 07:35:25 executing program 5: socket$kcm(0x29, 0x2, 0x0) socketpair(0x6, 0x1, 0x2, &(0x7f0000000000)) 07:35:25 executing program 1: socket$kcm(0x29, 0x7, 0x0) 07:35:25 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000100)) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc06}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x4000010) socket$kcm(0x29, 0x2, 0x0) 07:35:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000c24f3b1d590f72dc7ae8efa4afbae4515b09dc50e6d506e3d7aadece2fe2fbc47b495a4ea9181c40c1351cdec8227c6fe56d32cfcc2385d77748050cb9f42a8b", @ANYRES16=r1, @ANYBLOB="00082abd7000fcdbdf25070000000a0009004d7d19a0d920000008000300", @ANYRES32=0x0, @ANYBLOB="08002c00150000000800320000000000"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x200}]}, 0x2c}}, 0x4000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f0000000180)={0x3, 0x40, 0x7c1bca31}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000340)={{0x6, 0x3}, {0x2, 0x6}, 0xffffffff, 0x2, 0x9}) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000000)=0xc8) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r6, 0xc02c5341, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000240)={0x8, 0x7, 0x80000009}) 07:35:25 executing program 4: socket$kcm(0x29, 0x2, 0x0) 07:35:25 executing program 5: ioprio_set$pid(0x0, 0x0, 0x2007) get_robust_list(0x0, &(0x7f0000000140)=&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)}}, &(0x7f00000002c0)=0x18) fork() wait4(0xffffffffffffffff, &(0x7f00000001c0), 0x8, &(0x7f0000000200)) 07:35:25 executing program 1: socket$kcm(0x29, 0x7, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="02002abd7000fddbcf91860700000008003c0001040000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000084) [ 296.624576][ T9644] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 296.874429][ T9644] usb 3-1: Using ep0 maxpacket: 32 07:35:26 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001b80)='/proc/cpuinfo\x00', 0x0, 0x0) recvmsg$kcm(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001bc0)=""/43, 0x2b}, {&(0x7f0000001c00)=""/157, 0x9d}, {&(0x7f0000001cc0)=""/215, 0xd7}, {&(0x7f0000001dc0)=""/155, 0x9b}, {&(0x7f0000001e80)}, {&(0x7f0000001ec0)=""/35, 0x23}, {&(0x7f0000001f00)=""/176, 0xb0}, {&(0x7f0000001fc0)=""/110, 0x6e}, {&(0x7f0000002040)=""/24, 0x18}], 0x9, &(0x7f0000002140)=""/87, 0x57}, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000001400)={&(0x7f0000000000)=@can, 0x80, &(0x7f0000001280)=[{&(0x7f0000000080)=""/65, 0x41}, {&(0x7f0000000100)=""/174, 0xae}, {&(0x7f00000001c0)=""/8, 0x8}, {&(0x7f0000000200)=""/100, 0x64}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x5, &(0x7f0000001300)=""/207, 0xcf}, 0x1) 07:35:26 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="200030bd7000fcdbdf251100000008003a0001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x4044010) 07:35:26 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = eventfd2(0x4, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) socket$kcm(0x29, 0x7, 0x0) socket$kcm(0x29, 0x775b5684496e270a, 0x0) [ 297.104312][ T9644] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 297.113437][ T9644] usb 3-1: config 1 has an invalid descriptor of length 222, skipping remainder of the config [ 297.191617][ T9644] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 297.384354][ T9644] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 297.393449][ T9644] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.415173][ T9644] usb 3-1: Product: ᆪ沤㳓ꢺ礼墳럇檹崿䢬␫攔哹㾭쐊端㌯菷盼ꎕ㿭ො八ࠓ䍱籒볳臥荦빑掖 [ 297.434670][ T9644] usb 3-1: Manufacturer: 嚬坙ꗟﮯﶁ뼪݌웻轐ꃫ비媕ꫬ︘㛆啕扐懴ᮯ㡛膰삋េ恷矂칠ᒑ哊㐇岣敆姎䀿譇奈ચ胗쿛톓푿큢瘪羟暤ј [ 297.451998][ T9644] usb 3-1: SerialNumber: syz [ 297.826125][ T9644] usb 3-1: 0:2 : does not exist [ 297.847881][ T9644] usb 3-1: USB disconnect, device number 2 07:35:27 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ba963899"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x40) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000100)={{0x1f, 0x1}, 'port1\x00', 0x140, 0x44, 0x9, 0x1, 0x0, 0x5, 0xfa2e, 0x0, 0x2, 0xa8}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ba963899"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000380)={0x3, 0x4, 0x4, 0x10, 0xffff, {0x0, 0x2710}, {0x1, 0x8, 0x0, 0x3f, 0x5, 0xfe, "3e77cd44"}, 0x9, 0x4, @fd=0xffffffffffffffff, 0x6, 0x0, r1}) r5 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x4, 0x404040) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000400)={0xffffffc0, 0x0, 0x4, 0x800, 0xffff999f, {0x77359400}, {0x3, 0xc, 0xcd, 0x3, 0x8, 0x1, "d11b79e0"}, 0x8, 0x3, @fd=r4, 0x8, 0x0, r5}) 07:35:27 executing program 1: socket$kcm(0x29, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x240) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000040)={0x9, 0x10000, 0x1, 'queue1\x00', 0x8}) 07:35:27 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000001880)={&(0x7f00000015c0)=@can, 0x80, &(0x7f0000001800)=[{&(0x7f0000001640)=""/171, 0xab}, {&(0x7f0000001700)=""/188, 0xbc}, {&(0x7f00000017c0)=""/24, 0x18}], 0x3, &(0x7f0000001840)=""/64, 0x40}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f0000001580)={&(0x7f0000000000)=@ipx, 0x80, &(0x7f0000001480)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f00000000c0)}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/210, 0xd2}, {&(0x7f0000001200)=""/126, 0x7e}, {&(0x7f0000001280)=""/247, 0xf7}, {&(0x7f0000001380)=""/132, 0x84}, {&(0x7f0000001440)=""/7, 0x7}], 0x8, &(0x7f0000001500)=""/103, 0x67}, 0x40000000) 07:35:27 executing program 4: r0 = socket$kcm(0x29, 0x1, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c4c557f9828cb000000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fff6df250c000000050033000000000008003c000700000008003b00605508000292463defe8da8a000002000005002e000000000008003a0009000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4008085) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="708e4ce0a0010735c0b4766030c78aff6257df4910e4e48fd4d9425166e5b6522ed9007e949eb3528253ab29f7789bb4b0026fc81669402aa0eb731ccb5367109ae35e1c975a99250d6db6f97589989ef679139e51821751944d5e9a7ec3d281bbc3b02547c558cea88a80077575fccbead08513b59eda2850657b47aea9428376da0b7a4140d3abeabe293cb654d8c70d60d57b632b7459fb007d7b5a047d65ac810c05ee1b6dcd9cb2a1ee973281cd861f5e476e1109b9d2f8031a", 0xbc, 0xfffffffffffffffa) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000300)={{0x2, 0x7}, 'port0\x00', 0x60, 0x0, 0x10001, 0x74, 0x80000000, 0x80, 0x6, 0x0, 0x2, 0x2}) 07:35:27 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000001200)=0x1, 0x4) recvmsg$kcm(r0, &(0x7f00000011c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, &(0x7f00000010c0)=""/248, 0xf8}, 0x1) 07:35:27 executing program 3: socket$kcm(0x29, 0x2, 0x0) socket$inet6(0xa, 0x4, 0x5) 07:35:27 executing program 1: socket$kcm(0x29, 0x7, 0x0) 07:35:27 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, @vsock={0x28, 0x0, 0x0, @hyper}, @llc={0x1a, 0x207, 0x0, 0x2, 0x1f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @xdp={0x2c, 0x8, r4, 0x2}, 0xf992, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000140)='bridge_slave_0\x00', 0xffffffff, 0x91, 0x7e0}) 07:35:27 executing program 2: socket$kcm(0x29, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00', 0xffffffffffffffff) 07:35:27 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff59}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x100}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000040}, 0x4000000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r2, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x0, @can, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xfff9, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)='veth0_vlan\x00', 0xff, 0x8, 0x3f}) r3 = syz_open_dev$mouse(&(0x7f00000008c0)='/dev/input/mouse#\x00', 0x4, 0x101080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000a40)={&(0x7f0000000900), 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x6c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c0c4) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x55}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x101}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x200400c4}, 0x88d0) 07:35:27 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x6, 0x0, 0x10000, {0x77359400}, {}, {0x0, 0x1, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x1}, 0x26, 0x1, 0x0, 0x0, "663557d42c188570ba23cc4f82392f7d7b710bb319ca58afaf4b114a5bdae48679ea9ea1e54ec28d6b4f7c753e9867f7e906f2c6ee8f326d7a3e369fe1866f40"}}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000828bd7000fcdbdf2505000000080031007f00000008003b0000000080050035000200000008000300", @ANYRES32=r2, @ANYBLOB="a45fc7efa08fc70986caf0b824c077a97303bc2ed8614648ed27aad5af72bd96bd16ff74eee6a7fc2399afe93e9c46528fee7fdedf02252a90fac313589cc5f63388aa3016343a3e1da9124bf437"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4) 07:35:27 executing program 4: socket$kcm(0x29, 0x2, 0x0) exit(0x8) 07:35:27 executing program 2: prctl$PR_SET_FPEMU(0xa, 0x3) socket$kcm(0x29, 0x2, 0x0) 07:35:27 executing program 1: r0 = socket$kcm(0x29, 0x7, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/shm\x00', 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r2, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000080)={0xffffffff, 0x8, 0x4, 0x100000, 0x6, {}, {0x4, 0x0, 0x94, 0x1, 0x5, 0xc0, "af05b708"}, 0x1, 0x4, @fd=0xffffffffffffffff, 0xa}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r0, r0, r2, r0, r3, r0], 0x6) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000000)) 07:35:28 executing program 2: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000080)={{0x4, 0x3f}, 'port1\x00', 0x1e, 0x0, 0x5, 0x80000001, 0x6, 0x1, 0x19d023ea, 0x0, 0x2, 0x5}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x881}, 0x90) 07:35:28 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000140)=0x1, 0x4) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x10) 07:35:28 executing program 0: ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000000)={{0x4, 0x7f}, 0x0, 0x60, 0x74, {0x1f, 0x66}, 0xfd, 0xc95}) bind$can_raw(0xffffffffffffffff, 0x0, 0xfdf9) 07:35:28 executing program 2: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x101000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x7, 0x2d}, 'port1\x00', 0x2, 0x2144c, 0x8, 0x7, 0x2, 0xffffffe1, 0x3, 0x0, 0x2}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4808c) 07:35:28 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x810, 0xffffffffffffffff, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000040)=[{{0x1, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1}}, {{0x2, 0x1}, {0x3, 0x1}}], 0x10) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xffffffffffffffff, 0x101541) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 07:35:28 executing program 5: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x90}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}]}, 0x4c}}, 0x60015) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000), 0x1) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x0, 0x6, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f254c276"}}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000340)=0x5) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)={0x81, 0x7, 0x4, 0x400, 0x1, {r2, r3/1000+60000}, {0x6, 0x1, 0x9, 0x0, 0x4, 0x7f, "bfb7ca08"}, 0x7, 0x4, @userptr=0x2, 0x80000000, 0x0, r4}) 07:35:28 executing program 3: ptrace$cont(0x7, 0xffffffffffffffff, 0x9, 0x7) socket$kcm(0x29, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000100)) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x400}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3800}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000810) 07:35:28 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000037c0)={0x0, @hci={0x1f, 0x1}, @xdp={0x2c, 0xbbf9f2e6c91f014a, 0x0, 0x26}, @tipc=@name={0x1e, 0x2, 0x3, {{0x40}}}, 0x7, 0x0, 0x0, 0x0, 0xfbca, &(0x7f0000003780)='dummy0\x00', 0x80, 0x9, 0x6}) bind$can_raw(0xffffffffffffffff, &(0x7f0000003840)={0x1d, r1}, 0x10) 07:35:28 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000000)={0x200, 0xffffffff, 0x8000}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) bind$can_raw(r1, 0x0, 0x36) 07:35:28 executing program 4: write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:11 1', 0x1b) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) recvmsg$kcm(r0, &(0x7f0000001380)={&(0x7f0000000040)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001280)=[{&(0x7f00000000c0)=""/212, 0xd4}, {&(0x7f00000001c0)=""/148, 0x94}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x3, &(0x7f00000012c0)=""/145, 0x91}, 0x100) 07:35:28 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', r0) 07:35:28 executing program 1: socket$kcm(0x29, 0xd, 0x0) 07:35:28 executing program 3: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000040)) socket$kcm(0x29, 0x2, 0x0) 07:35:28 executing program 2: socket$kcm(0x29, 0x6, 0x0) 07:35:28 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x2000c000) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00022abd7000fbdbdf251200000008000b000800000008000600", @ANYRES32=0x0, @ANYBLOB="e5e119e530a7ae15", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x54) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) 07:35:28 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x400000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000040)={0x3f, 0x2, 'client1\x00', 0x4, "ee4ccc9eb42e7b00", "02008100000000000000f72b05c17766599ecc0642e2a1e55eb100", 0x2400, 0x1}) 07:35:29 executing program 2: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) socketpair(0x1, 0x5, 0x8, &(0x7f0000000100)) socketpair(0x3a, 0x5, 0x5fbf, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000001c0)=[{{0x3, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1}}, {{0x4}, {0x0, 0x0, 0x1, 0x1}}, {{0x2}, {0x1, 0x1, 0x1, 0x1}}, {{0x3}, {0x2, 0x1, 0x1, 0x1}}, {{}, {0x2, 0x0, 0x1, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x4}}, {{0x1, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x3}, {0x1, 0x1, 0x1}}], 0x40) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) recvmsg$can_raw(r3, &(0x7f0000001640)={&(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/113, 0x71}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/2, 0x2}, {&(0x7f00000003c0)=""/249, 0xf9}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x5, &(0x7f0000001580)=""/131, 0x83}, 0x40000100) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000180)=0x100020) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x324407ee, 0x3, 0x4, 0xe32f99a7066891f, 0xa24, {0x0, 0x2710}, {0x4, 0x1, 0x46, 0xf8, 0x1, 0x25, "1cee6377"}, 0x5, 0x4, @planes=&(0x7f0000000040)={0x7fffffff, 0x0, @fd, 0x8000}, 0x4, 0x0, r2}) 07:35:29 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0xc011}, 0x40) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, 0x0, 0x0) 07:35:29 executing program 3: socket$kcm(0x29, 0xa, 0x0) 07:35:29 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000004c0)=0xffffffffffffffff) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/timer_list\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000a, 0x11, r3, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)}, 0x100) sendmsg$can_bcm(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500000040000000bf00000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="040000a00100d0f410ce88003e37d300000000"], 0x48}, 0x1, 0x0, 0x0, 0x10040000}, 0x92) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r0, 0xffffffffffffffff, r1, r2, 0xffffffffffffffff], 0x6) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) recvmsg$can_raw(r4, &(0x7f0000000400)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/241, 0xf1}, {&(0x7f00000002c0)=""/208, 0xd0}], 0x2}, 0x2000) socket$kcm(0x29, 0x2, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r5, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) r6 = eventfd2(0x4, 0x1) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f00000005c0)=[0xffffffffffffffff, r1, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, r6], 0x9) 07:35:29 executing program 5: getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qrtr-tun\x00', 0x0) write$qrtrtun(r0, &(0x7f00000000c0)="9b47d066c0b5ca585ababbe8823a1faa560e007d94e8e954750a3b769f20253d0743ff0ba17a9e5f35b4a524b625409f1b3d8f0cfcd8592a5c78d7d87276345192edc2833c9e9ee80ef6eb76868f3a34c8e7662d06fa8c56b17518b73e8ebad356928adc3a5d9bb9a9d5552ff0ea1a39ea24e8c1015cc66fccebf5fde64dd7c39cca328827c01b12b1818cad645d2d4e23ce8f7f6e21150543070db9caea8f78b1e1eb8d7e003ef5893b553fe9ab257cfdbd3f338764f9f8945788359508f7656e80969198b543e4b9632f", 0xcb) socket$kcm(0x29, 0x2, 0x0) 07:35:29 executing program 4: socket$kcm(0x29, 0x0, 0x0) 07:35:29 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) socket$inet6(0xa, 0x4, 0x22) recvmsg$kcm(r0, &(0x7f0000001500)={&(0x7f0000000000)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/15, 0xf}, {&(0x7f00000000c0)=""/164, 0xa4}, {&(0x7f0000000180)=""/71, 0x47}, {&(0x7f0000000200)=""/202, 0xca}, {&(0x7f0000000300)=""/154, 0x9a}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x6, &(0x7f0000001440)=""/191, 0xbf}, 0x101) r1 = fork() ioprio_set$pid(0x2984b695c55d2070, r1, 0x2004) 07:35:29 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080)=r0, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000000)={0x90, 0x1, 0x4, 0x20, 0x6, {0x77359400}, {0x2, 0x2, 0x6, 0x8, 0xfa, 0x8, "e53d25a8"}, 0x200, 0x3, @planes=&(0x7f00000000c0)={0x2, 0x9, @userptr=0x3, 0x7f}, 0x66f6, 0x0, r0}) 07:35:29 executing program 2: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, [], [{}, {}, {}]}, 0x3) 07:35:29 executing program 5: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 07:35:29 executing program 5: socket$kcm(0x29, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000100)={0x78, 0x6, 0x4, 0xb71, 0x3, 0x4}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{0x6, 0x40}, 'port0\x00', 0x2, 0x10, 0x81, 0x2, 0x8, 0x9, 0x8, 0x0, 0x2, 0x2}) 07:35:29 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000)=0x2, 0x3c) socketpair(0x22, 0x2, 0xfffffbff, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x902, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffb}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x404c084) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x4, 0x80, 0x9, {}, {r2, r3/1000+10000}, {0x3, 0x1}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x3, 0x1, 0x0, 0x0, "e38e43090585c360"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x24000020) 07:35:29 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3ff8, 0x1e242) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x0, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}], 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xe1ad}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="a6f10dbbcb00a5b4dc34914afbfe23de5bede90d0c1f0ce7533748449b68298f0fd0a9265f5667a7c6c4e7fffc48ce48df5357c71c60f9fa42fe64293a642f44de00d0898fab34db06da5a54880974d81578073981fedd354c4648697ad221f3a9ec8e851f1ed67a84429afd2a9d198aeee5126a416e2273ed3f9692e336ac46878773cd81dfbc", @ANYRES16=0x0, @ANYBLOB="04002cbd7000ffdbdf250700000008003a00ff030000080034000600000008003b001f0000000800340001000000080039000002000005002a0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00', r0) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4009084}, 0x4000800) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002800)='batadv\x00', r7) syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x3, 0x400) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x3c, r8, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48080}, 0x800) socket$kcm(0x29, 0x2, 0x0) 07:35:29 executing program 4: socket$kcm(0x29, 0x2, 0x0) socket$inet6(0xa, 0x80000, 0x5) 07:35:30 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000), 0x4) 07:35:30 executing program 1: ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000000)={0x2ca, 0x8000, 0x2, 0x2000002, 0x4, 0xd19}) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, 0x0) write$sndseq(r2, &(0x7f0000000240)=[{0x6c, 0x4, 0x1, 0x4, @time={0x9, 0xfffffffc}, {0x81, 0x3}, {0x89, 0x7}, @ext={0xed, &(0x7f0000000140)="b54ddb51c504e86aba7527af586a89d9a12bfc46305dfb09f0244644ae2f8721996e0d556de70cf44aec140933149274458b98f12dc3777baae4bd4903c2dfb32669c4bbc75497266bccbc0e6e55e0e135f550d8f3fe2e5851a96a3521c92d6d72e688bdcf0c10d80a37e7ddf4bd87267adcbf9a19872df8a5c545c39cffa8c1cc6d7c921fbe9ddd56bbfdc295a46ac184ab485d7dd0afa26a9abdd2cd53940852c719f3f5a66691595c9d9b1256c17e3e6d0e5095d6b01b866cb99404042b3a8dea0ddf7f313a9110eee16b52c291f5402491e29db3650bd4f2c85d925429d5338132c1856e7399f801d4a101"}}, {0x2, 0x96, 0x47, 0xfb, @time={0x10000, 0xffff}, {0x9d, 0x86}, {0x7, 0x1}, @control={0x7d, 0x5, 0x6}}, {0x7f, 0xff, 0x40, 0x6, @time={0xaa, 0x7}, {0x7, 0x1}, {0x4, 0x2}, @note={0x9, 0x7, 0x81, 0x7, 0x1000}}, {0x81, 0x1, 0x8, 0x7f, @tick=0x800, {0x4, 0x20}, {0x8, 0x5}, @time=@tick=0x7}, {0x7c, 0x6, 0xb, 0x80, @tick=0x200, {0x6, 0x7f}, {0x3, 0x5}, @raw32={[0x3, 0x7d, 0x8]}}], 0x8c) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000840)={0x7d, 0x3, 0x4, 0x1, 0x1, {0x0, 0xea60}, {0x2, 0xc, 0x2, 0xc1, 0x6, 0xe7, 'dP0x'}, 0x10000, 0x1, @fd, 0x0, 0x0, r1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, 0x0) recvmsg$kcm(r0, &(0x7f0000000800)={&(0x7f0000000400)=@generic, 0x80, &(0x7f0000000700)=[{&(0x7f0000000480)=""/64, 0x40}, {&(0x7f00000004c0)=""/30, 0x1e}, {&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f0000000600)=""/226, 0xe2}], 0x4, &(0x7f0000000740)=""/151, 0x97}, 0x2000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000300)={0x6, 0x1, {0x3, 0x3, 0x6, 0x1, 0x4}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000080)={{0x8, 0x26}, 'port1\x00', 0x1a, 0x1000, 0x8, 0x1f, 0x3f, 0x7fff, 0x7, 0x0, 0x4, 0xc1}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x200) socket$inet6(0xa, 0x80000, 0x8) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f00000003c0)={0xa0, 0x6, 0x9}) 07:35:30 executing program 2: socket$kcm(0x29, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0xe0002) 07:35:30 executing program 5: socket$kcm(0x29, 0x2, 0x0) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000000)=0xa23b) 07:35:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001200)={&(0x7f0000000000)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x48844) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) 07:35:30 executing program 4: socket$kcm(0x29, 0x2, 0x0) prctl$PR_SET_FPEMU(0xa, 0x2) 07:35:30 executing program 5: membarrier(0x4, 0x0) socket$kcm(0x29, 0x2, 0x0) 07:35:30 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x1}) r1 = io_uring_setup(0x39f1, &(0x7f0000000040)={0x0, 0x72cf, 0x0, 0x0, 0x24f}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000000c0)=r2, 0x1) socket$kcm(0x29, 0x2, 0x0) 07:35:30 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f0000000080)={0x6, 0x7, 0x10001}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfff}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}}, 0x4000840) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00c800", @ANYRES16=r2, @ANYBLOB="010429bd7000ffdbdf250400000005002a000000000008002c00c0ffffff050038000000000008003c00a50d000008003100ff000000050035000900000008002c0007000000050038000100000008000600", @ANYRES32=r4, @ANYBLOB="e07b5d039a2d89da8d14859022196efa212eaf624ec6ccd53a8f5421360100d9696f6809a68bc88c89a8d038a4eb1d840ac5f080706089e5ca6ff5b9a686f2d7ef795df007ab91edb03ed01df2c673d2ae42779ddf8c1ce4884999b75dc81d5eadfbb268830151f81cd080ef2d66f4e28fe3d0ca3e996c11586714cb01029e6fd29269d2006aec60ba80305802a3adc9af1fc957c7de90a430736ee6648659148c747d15076503692b711eba5356d5e31dfb710fbd770f2e29e4"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4008844) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 07:35:30 executing program 4: socket$kcm(0x29, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 07:35:30 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x244481) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x7, 0x7, 0xffff, 0x1ff, 0x9, 0x7}) socket$kcm(0x29, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000100)={0x7fffffff, 0x0, 'client1\x00', 0x1, "05e6593a704aa148", "1c818aaf949d2f665b56dc566caabdaa03d347d17cab16a2ce7f0739655078e1", 0x9, 0x101}) 07:35:30 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000040)={0x80000000, 0x2, {0x3, 0x1, 0x1, 0x0, 0x1}, 0x14}) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0x200, 0x4) 07:35:30 executing program 3: socket$kcm(0x29, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0300000010000000f200000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRESOCT=r1, @ANYBLOB="0004000001000200030000200221002d37a218a599d1323c"], 0x48}}, 0x24000015) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r2, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r3 = io_uring_setup(0x4a0e, &(0x7f0000000040)={0x0, 0xa5ea, 0x1, 0x2, 0x38}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x2010, r3, 0x8000000) 07:35:31 executing program 1: socket$kcm(0x29, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000000)={{0xfc, 0x2}, 'port0\x00', 0x1, 0x21040, 0x5, 0x1cbd, 0x5, 0x1ff, 0x2, 0x0, 0x5, 0x81}) 07:35:31 executing program 4: socket$kcm(0x29, 0x5, 0x0) 07:35:31 executing program 2: socket$kcm(0x29, 0x2, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x2e, &(0x7f0000000000)=""/150) 07:35:31 executing program 5: socket$kcm(0x29, 0x0, 0x0) 07:35:31 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0x10, &(0x7f0000000680)={&(0x7f0000000600)={0x4, 0x20, 0xfffffffb, {0x0, 0x2710}, {0x0, 0xea60}, {0x4, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x10, 0x2, 0x0, 0x0, "2a340c2a6f58b53ae19a8163198f492de2c148a6523e1821ef57a0334845fb9320ad217dd7dd031047aba23c5cf6a7cd1f75e73fccd89f2926761ba14490b0d0"}}, 0x80}, 0x1, 0x0, 0x0, 0x30040800}, 0x4000040) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x151200) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000140)={{0x3, 0x3b}, {0x20, 0x8a}, 0x0, 0x7, 0x20}) recvmsg$can_bcm(r1, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000240)={0x7ff, 0xa, 0x4, 0xe000, 0xff6, {}, {0x5, 0x2, 0x9, 0x8, 0x1, 0x6, "b788b649"}, 0x8, 0x4, @planes=&(0x7f0000000200)={0xfffffffd, 0x2, @mem_offset=0x2e54, 0x8}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000002c0)={0x40, 0x1, 0x4, 0x0, 0x1806, {}, {0x5, 0x8, 0x1, 0x20, 0x40, 0x80, "69db4627"}, 0x10001, 0x4, @planes=&(0x7f00000001c0)={0x7ea4, 0x6, @userptr, 0x3}, 0xfffffffb, 0x0, r4}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/seq\x00', 0x200000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000380)={0x3, 0xcc, 0x20}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @ipx={0x4, 0x2, 0x1975c2d1, "486525863bce", 0x5}, @llc={0x1a, 0x0, 0x81, 0x6, 0x8, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @sco={0x1f, @none}, 0x0, 0x0, 0x0, 0x0, 0x401, &(0x7f0000000000)='erspan0\x00', 0x9263, 0x9}) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000540)=[{}, {}, {}], &(0x7f0000000580)=0x18) r6 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r6, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x1d, r3}, 0x10, &(0x7f00000004c0)={&(0x7f0000000440)={0x7, 0x10, 0x100, {0x0, 0x2710}, {0x0, 0xea60}, {0x3, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "3bab8bde61566f22e32f17b97765714bdbe82a8c1f159db6605a2b85f8530f890175fa5e3d452476640ccafacc6fd89cf497fe43d679455f4828fc0d8b822954"}}, 0x80}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) socketpair(0x27, 0x1, 0x3, &(0x7f00000000c0)) 07:35:31 executing program 2: socket$kcm(0x29, 0x2, 0x0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)=0x48) 07:35:31 executing program 4: socket$kcm(0x29, 0x4, 0x0) 07:35:31 executing program 1: fork() ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000000)={0x8, 0x1, {0xffffffffffffffff, 0x0, 0xfffffffc, 0x0, 0x4}, 0x1}) socket$kcm(0x29, 0x5, 0x0) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x80000b, 0x30, 0xffffffffffffffff, 0xe000000000000000) 07:35:31 executing program 5: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2804103}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000069f4c779cfe405cf1c1360eb5cdae049a31f286360ad73c242cedacc77d6fb6c4bb1aecee57ef81e457828eb65810ae66be163135e79a7bc913290aec992f1f655e0b02668b4da07279343b1c9b0ea662db2df72da917", @ANYRES16=0x0, @ANYBLOB="000250000000fedbdf250900000005002e000000000006002800010000000a000900bbbbbbbbbbbb00000500330001000000050037000000000008002b00020000000a0009000180c20000010000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) socket$kcm(0x29, 0x2, 0x0) 07:35:31 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40001800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) socket$kcm(0x29, 0x0, 0x0) 07:35:31 executing program 4: socket$kcm(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040891}, 0x5) 07:35:31 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x800, 0x157080) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x89, 0xdc}, {0x0, 0x9}, 0x4, 0x4}) 07:35:31 executing program 5: socket$kcm(0x29, 0x7, 0x0) r0 = io_uring_setup(0x47f, &(0x7f0000000000)={0x0, 0x50a7, 0x1, 0x3, 0x27a}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c3b676760000000000000000000000000000000000000000b81655aa00"/152], 0x11) 07:35:31 executing program 2: fork() r0 = fork() wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000040)) socket$kcm(0x29, 0x2, 0x0) 07:35:31 executing program 1: syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', 0xffffffffffffffff) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) 07:35:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x42800404}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xa}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x4b}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}]}, 0x34}, 0x1, 0x0, 0x0, 0x8100}, 0x40000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x6}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280)='802.15.4 MAC\x00', r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r4, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 07:35:32 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)=0x3f) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000580)={0x7af7, 0x1000, "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"}) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) 07:35:32 executing program 1: r0 = fork() get_robust_list(r0, &(0x7f0000000180)=&(0x7f0000000140)={&(0x7f0000000100)}, &(0x7f00000001c0)=0x18) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008000) r1 = fork() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x9, &(0x7f0000000200)=""/7) socket$kcm(0x29, 0x2, 0x0) 07:35:32 executing program 3: socket$kcm(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x64bd}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40080) 07:35:32 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004c0d1}, 0x0) 07:35:32 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) recvmsg$kcm(r1, &(0x7f0000001680)={&(0x7f0000000200)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)=""/148, 0x94}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/72, 0x48}, {&(0x7f0000000480)=""/37, 0x25}, {&(0x7f00000004c0)=""/223, 0xdf}, {&(0x7f0000000000)=""/8, 0x8}], 0x6, &(0x7f0000000680)=""/4096, 0x1000}, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000002880)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000002940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x24004044) 07:35:32 executing program 4: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x101000, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x1) 07:35:32 executing program 2: socket$kcm(0x29, 0x2, 0x0) 07:35:32 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x480881) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000040)={0x6, 0x7, 0x2}) socket$kcm(0x29, 0x2, 0x0) 07:35:32 executing program 4: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, @l2={0x1f, 0x9, @fixed={[], 0x12}, 0xd68c, 0x1}, @nfc={0x27, 0x0, 0x1, 0x3}, @ethernet={0x306, @dev={[], 0x42}}, 0x20, 0x0, 0x0, 0x0, 0xffff, &(0x7f0000000180)='wg0\x00', 0xdffc, 0x8}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', r0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001a80)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@initdev}}, &(0x7f0000001b80)=0xe8) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000001c40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x2c, r1, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80010}, 0x40010) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x242}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x40010) 07:35:32 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) bind$can_raw(r0, 0x0, 0xffffffffffffffc2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 07:35:32 executing program 5: socket$kcm(0x29, 0x5, 0x0) 07:35:32 executing program 2: prctl$PR_GET_FP_MODE(0x2e) prctl$PR_GET_FP_MODE(0x2e) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@private2, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r1, 0x1) socket$kcm(0x29, 0x2, 0x0) prctl$PR_GET_FP_MODE(0x2e) 07:35:32 executing program 3: socket$kcm(0x29, 0x5, 0x0) 07:35:32 executing program 1: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000580)={0x1, 0x6b51, 0x1, 'queue0\x00', 0x6}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)=@nl=@unspec, 0x80, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/224, 0xe0}, {&(0x7f00000003c0)=""/209, 0xd1}], 0x2}, 0x2000) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000000)=@generic, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/16, 0x10}, {&(0x7f00000000c0)=""/114, 0x72}], 0x2, &(0x7f0000000180)=""/107, 0x6b}, 0x0) 07:35:32 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0xffffff86) 07:35:32 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f00000000c0)={{0xf9, 0x1}, 'port0\x00', 0x24, 0x200000, 0x8, 0x1, 0xffff, 0x1f, 0x2c, 0x0, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000000)) socket$kcm(0x29, 0x8, 0x0) 07:35:32 executing program 5: socket$kcm(0x29, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000001600)={&(0x7f0000000040)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000580)=[{&(0x7f0000001640)=""/129, 0x81}, {&(0x7f0000001700)=""/87, 0x57}, {&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000000300)=""/64, 0x40}, {&(0x7f0000000100)=""/94, 0x5e}, {&(0x7f00000003c0)=""/156, 0x9c}, {&(0x7f0000000480)=""/247, 0xf7}], 0x8, &(0x7f0000000600)=""/4096, 0x1000}, 0x141) 07:35:32 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x1}}, {{0x3, 0x1, 0x1}, {0x3}}, {{0x3, 0x0, 0x1}, {0x2, 0x1}}, {{0x3, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}], 0x30) 07:35:32 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000040)={{0xbb, 0x1}, 'port0\x00', 0x82, 0x1041, 0x5, 0x9, 0x3, 0x51e, 0x6, 0x0, 0x9cd0ef381524646f, 0x11}) socket$kcm(0x29, 0x1, 0x0) 07:35:32 executing program 3: socket$kcm(0x29, 0x2, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/131, 0x83}], 0x1, &(0x7f0000000180)=""/70, 0x46}, 0x2) 07:35:32 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00', r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x4, 0x70bd29, 0x25dfdc01, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x0, 0x13, 0x7}, @IEEE802154_ATTR_SCAN_TYPE={0xffffffffffffffbd, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x0, 0x13, 0x1f}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x74}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x2004c804) exit_group(0x6) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d37800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000b1d17c58cdc217b7569467fc8a039c7fa8213cd00ebd564daad62738f3cc3e68a65f9d16b1e3e837d0ba23defbf69675e634a04b8d8a9553ec367b03e251e9d6eb1411b81e90d953cd60009c3ee38a6f0c4f40fdce6c17e8fa995d4b6e4eeb3914a97e4e40b24b"], 0x22) exit_group(0x6) 07:35:32 executing program 4: socket$kcm(0x29, 0x2, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@ipv4={[], [], @loopback}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f00000009c0)=0xe8) bind$can_raw(r0, &(0x7f0000000a00)={0x1d, r1}, 0x10) 07:35:32 executing program 0: ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0x40000, 0x1, 'client1\x00', 0x1, "f22547f3e29166a5", "33153ed325dbd2fc7bf67b9aef00333886e5e08068aeab8e8d173441c66836ca", 0x65a, 0x5}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x2c}}, 0x44040) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) 07:35:32 executing program 1: socket$kcm(0x29, 0x0, 0x0) getresuid(&(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000080)) socketpair(0x1a, 0x3, 0x4, &(0x7f0000000180)) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 07:35:33 executing program 3: socket$kcm(0x29, 0xdf46d1517dc78d96, 0x0) 07:35:33 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 07:35:33 executing program 4: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000140)={0xfd, 0x4, 0x81}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000040)) prctl$PR_SET_PDEATHSIG(0x1, 0x10001) 07:35:33 executing program 5: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0000fa0c", @ANYRES16=0x0, @ANYBLOB="000000d5c1e3c7130800001000000000ff00"], 0x14}}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0xffffffffffff8000, 0x400) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/16, 0x10}, {&(0x7f00000001c0)=""/56, 0x38}, {&(0x7f0000000200)=""/111, 0x6f}], 0x3) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40040d0) 07:35:33 executing program 2: socket$kcm(0x29, 0x0, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snd/seq\x00', 0x10000) r1 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000400)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000480)=""/182, 0xb6}], 0x1, &(0x7f0000000580)=""/34, 0x22}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="000828bd7000fedbdf2523000000050023000100000093ccb2906c272c0f2d337085fab3dc0a39671de2695be843c8c54999e41f3cdca20bc45f18c965855c36ef7c80863de2d102f1064c23b76dcac6b8fcd80f4cb543a863460000001085cc0571dead0fb6d935a24fd77fd7f3946ce3c17e1aaab8834fb46beaae87e1d0deee954d"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4841) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="000125591adfd90b90d15e6d013049d5a52d606bfa00"], 0x1c}}, 0x4040000) prctl$PR_SET_PDEATHSIG(0x1, 0x2f) socket$kcm(0x29, 0x5, 0x0) 07:35:33 executing program 1: socket$kcm(0x29, 0x2, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x8, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x4084) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008880}, 0x4000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x14}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_macvtap\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x32}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000) 07:35:33 executing program 4: socket$kcm(0x29, 0x2, 0x0) socketpair(0x11, 0x6, 0x7, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x11, 0x4, 0xb9bd, &(0x7f0000000140)) getrusage(0xffffffffffffffff, &(0x7f0000000080)) init_module(&(0x7f0000000000)='\x00', 0x1, &(0x7f0000000040)='^^,#/&]\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fcdbca0f0600000008003900080000000800310001800000f0ff3300010000ef7bc13d955d5f8f000000280003f0ff00"], 0x3c}, 0x1, 0x0, 0x0, 0x20000094}, 0x4) 07:35:33 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x14) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) write$qrtrtun(r2, &(0x7f0000000000)="1e82662ab29ebde7045b0c661378718a50eeb9e7aafab53501f28a4550f9a0ba773181cd4cf04fa27568475669c0a6754d8e446fdeba749209e3911a62e48b39bb431762ff14a3189cbbd16d57280b1ca04f5baef7bb9070612395af0f4441e4b4eaa0671cd49d9d1c92a0bbb0a8fca77e168307d05840f7738e843a2c3002538114c742db6d793dff4ea44668c5a89ef56af90745d5f255a431bf1c57bae2330506", 0xa2) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000f, 0x10, r1, 0x7) 07:35:33 executing program 3: socket$kcm(0x29, 0x2, 0x0) getrusage(0x0, &(0x7f0000000000)) 07:35:33 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) syz_io_uring_setup(0x3c69, &(0x7f0000000000)={0x0, 0xcaa6, 0x1, 0x0, 0x71, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 07:35:33 executing program 2: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000)='NLBL_MGMT\x00', 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) 07:35:33 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/152, 0x98}], 0x1, &(0x7f0000000180)=""/101, 0x65}, 0x2042) recvmsg$can_raw(r1, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/194, 0xc2}], 0x2, &(0x7f0000000440)=""/98, 0x62}, 0x21) 07:35:33 executing program 4: socket$kcm(0x29, 0x2, 0x0) 07:35:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000020000006d591c8a75d7c2759eed74a8f001ad2f3de54fd26aea4d52a977accc85574a742076d58ea61ad1833182ebd8743dc88f569de1fec08cf5ac06db04f0d23afd7f58fe79de745b14b295d569217c0a666a03b30c6ba7f01f37c2109552e6970e5995e029d44c05"], 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000)='NLBL_MGMT\x00', r0) socket$kcm(0x29, 0x2, 0x0) 07:35:33 executing program 0: socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) bind$can_raw(r3, 0x0, 0x3e) 07:35:33 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000040)={0x1}) 07:35:33 executing program 1: socket$kcm(0x29, 0x2, 0x0) r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040)='NLBL_CIPSOv4\x00', 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000080)={0x4b0, r0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x128, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65719e50}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x548be3d6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f208dc6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18cab411}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b6b27d8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a2ce752}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c9de507}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x264cc4f5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5dacf5b0}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25656470}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x58b448f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b336ff1}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x58, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc361466}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ba2f3ad}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2055f862}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x146ceb41}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3aa3314a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f7d7585}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78620382}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3173fb41}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1a4, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38e721b}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74f79698}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78ac15bd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22970d32}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x556bce8f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5325d23b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f8ea929}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62b12bb1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20da664f}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51d8919d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf1c8cdd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38c61fbf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x424d3785}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6749bf02}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d93c8fb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45820f87}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e1b83cb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ac94e23}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b17d2a8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x341471f7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e2a23}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7fd727e7}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1199af25}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x504529c1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x739fcd5f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x505c3534}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db9c3a4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x154, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xff3f8ca}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe4b2c4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x798d71c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a80b996}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d51cc87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5395dd8b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecd2294}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19cd03c9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd282562}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x549b720b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67ec7090}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7719e2d4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3846ad1d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a1e6910}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ed315d6}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3042c4ea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30acd316}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1995a107}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e87952}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b47617}]}]}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x2c3ed275127410a3}, 0x8080) 07:35:33 executing program 4: setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000), 0x4) socket$kcm(0x29, 0x2, 0x0) 07:35:33 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r0], 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xfffffffffffffecc) bind$can_raw(r0, &(0x7f00000032c0)={0x1d, r5}, 0x10) 07:35:33 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x40, 0x40000) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000090", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fcdbdf2505000000050030000100000008003900ff7f0000"], 0x24}, 0x1, 0x0, 0x0, 0x48845}, 0x240040d0) socket$kcm(0x29, 0x2, 0x0) 07:35:33 executing program 3: socket$kcm(0x29, 0x2, 0x0) 07:35:33 executing program 5: socket$kcm(0x29, 0xf, 0x0) 07:35:33 executing program 1: socket$kcm(0x29, 0x7, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000001680)=[{{0x4, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x3, 0x1}, {0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}], 0x20) 07:35:33 executing program 4: socket$kcm(0x29, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan4\x00'}) sysfs$3(0x3) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000840}, 0x800) recvmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/232, 0xe8}, {&(0x7f0000000180)=""/30, 0x1e}, {&(0x7f00000001c0)=""/174, 0xae}, {&(0x7f0000000280)=""/83, 0x53}, {&(0x7f0000000300)=""/192, 0xc0}], 0x5, &(0x7f0000000440)=""/238, 0xee}, 0x10001) 07:35:33 executing program 3: socket$kcm(0x29, 0x5, 0x0) 07:35:33 executing program 0: socketpair(0x11, 0x6, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r0, &(0x7f0000000040), 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) recvmsg$can_bcm(r1, &(0x7f0000000500)={&(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000380)=""/230, 0xe6}], 0x1, &(0x7f00000004c0)=""/1, 0x1}, 0x40002140) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x4) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044051) 07:35:33 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000002800)='/dev/input/mouse#\x00', 0x8000, 0x80002) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00', r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000002900)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x14, r1, 0x100, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x840) socket$kcm(0x29, 0x0, 0x0) 07:35:33 executing program 5: socket$kcm(0x29, 0x7218add54984f326, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xffff, 0x101000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00022c077000fedbdf2507000000050038000000000008003b000200000005002e0001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x800) 07:35:34 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000000)={0xb26a, 0x7, 0x67}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x80, 0x208880) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000340)={0x4, 0x1, 0x0, 'queue1\x00', 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000280)={0xb99, 0x3, 0x80000000, 0x34f, 0x1ff, 0xb976}) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000000c0)={0x1000, 0x1, 'client1\x00', 0xffffffff80000000, '\x00', "8395615e3399d9d59fa6f44ed64989b3d0c9775b63ce43351818c74aa3d893e8", 0x14}) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x15}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x15}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xe}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000180)={0x911, 0x1, 'client1\x00', 0x7, "065981f4c58cda0a", "4438d0aed509c9ee7d41b135f63cfda7ad586f0df4f2ac8fd58db22efa99c094", 0xff, 0xffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/seq\x00', 0x0) 07:35:34 executing program 3: socket$kcm(0x29, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000580)='/dev/input/mouse#\x00', 0x9, 0x882) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000140)=ANY=[]) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f00000000c0)={{0x8}}) recvmsg$kcm(r0, &(0x7f0000000700)={&(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000680)=""/102, 0x66}, 0x40010080) 07:35:34 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000000c0)={0x3f, 0x1, 0x20}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)={0x781, 0x4, 0x5}) socket$kcm(0x29, 0x2, 0x0) 07:35:34 executing program 0: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x440000, 0x0) 07:35:34 executing program 5: socket$kcm(0x29, 0x7, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000080)={0x7, 0x0, {0x0, 0x1, 0x2, 0x0, 0x90}, 0x11f3}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000100)={0xd90, 0x1, {0xfffffffffffffffe, 0x3, 0x4d44, 0x0, 0x7fffffff}, 0x10000}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)={0x80000001, 0x2, 0x4, 0x8, 0x4ade, {r1, r2/1000+10000}, {0x2, 0x2, 0x40, 0x2, 0x3, 0x1, "f6b118d5"}, 0x3, 0x4, @planes=&(0x7f0000000180)={0x5, 0x3b3, @userptr=0xf85, 0x8000}, 0x6, 0x0, r0}) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x80) ioctl$MEDIA_REQUEST_IOC_QUEUE(r3, 0x7c80, 0x0) 07:35:34 executing program 2: mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x7ffe) socket$kcm(0x29, 0x0, 0x0) 07:35:34 executing program 1: socket$kcm(0x29, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/223, 0xdf}, {&(0x7f0000000100)=""/90, 0x5a}, {&(0x7f0000000180)=""/28, 0x1c}, {&(0x7f00000001c0)=""/245, 0xf5}], 0x4, &(0x7f0000000300)=""/101, 0x65}, 0x40010140) 07:35:34 executing program 4: write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x9, 0xf, 0xaa, 0x3, @time={0x4, 0xff}, {0xfb}, {0x6, 0x2}, @time=@tick=0x420b}, {0xa9, 0x21, 0x6, 0x9, @tick=0x3f2f, {0x8, 0x5c}, {0x7, 0x1}, @raw8={"2638557dd2267b5b17aa09a5"}}, {0x2, 0x5, 0x67, 0xff, @tick=0x7, {0x3, 0x8}, {0x8, 0x6}, @result={0x101}}], 0x54) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x2, 0x4000) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vim2m\x00', 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r3, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r4, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@mcast1, @in=@private}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000840)=0xe8) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000140)=@can, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/178, 0xb2}, {&(0x7f0000000440)=""/210, 0xd2}, {&(0x7f0000000540)=""/193, 0xc1}, {&(0x7f0000000640)=""/163, 0xa3}], 0x4, &(0x7f0000001180)=""/4096, 0x1000}, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) recvmsg$can_bcm(r5, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r0, r2, r0, r3, r4, r5], 0x6) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r7, 0x40bc5311, &(0x7f0000000700)={0x2, 0x0, 'client0\x00', 0x2, "2feebe3118803e14", "545005bb897701e367194dfdc71d883f3cc6d94efedaa10da09625c4903010f5", 0x8}) setitimer(0x0, &(0x7f00000007c0)={{}, {0x0, 0xea60}}, &(0x7f0000000800)) 07:35:34 executing program 3: socket$kcm(0x29, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r1, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, @phonet={0x23, 0xc6, 0x2, 0x1f}, @isdn={0x22, 0x9, 0x5, 0x80, 0x20}, @l2={0x1f, 0x8001, @fixed={[], 0x10}, 0x7fff, 0x2}, 0x36af, 0x0, 0x0, 0x0, 0x400, &(0x7f00000000c0)='bond_slave_1\x00', 0xf2d6, 0xffffffff, 0xa00}) eventfd2(0x4aee1a69, 0x800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x4, 0x1}, 'port1\x00', 0x6, 0x90000, 0x1, 0x8, 0xfffff8f2, 0x1, 0x5, 0x0, 0x2, 0x9}) 07:35:34 executing program 0: wait4(0x0, &(0x7f0000000000), 0x1, &(0x7f0000000040)) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) 07:35:34 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x10f101) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000004c0)={r0, 0x0, 0xfffefffefeff7000, 0x1000000000000}) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00', 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0)='NLBL_MGMT\x00', 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, [], 0x2}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x400c011) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6, @in=@remote}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="efff0000ffa2a18975cb82cfbef20a0bf59bc3e3bec2f0b3badf7893ac286a4b1234459983aec385043f62a8fd934f3e24f15f1cd8dd7c0faa2f3f7bbdc3b2d04cb2e16a147d2efac8f8d45ebcfd6cc276cc829cf03ea8de8437bf609177590f6fa332d8bfcb08f57f030a6d20b55ce64c69efb286981a1661a56abee012e208422689a41477adc2fb40374c4e0dac9177402903bea99a7413024b61eeced333c17f4e611aff4900d467", @ANYRES16=r1, @ANYBLOB="00022bbd7000fbdbdf2501000000080002000200000008000100030000000800010001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x48040) 07:35:34 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="b6b227bd7000fedbdf250900000005003000000000000800390001000000080032003f00000009f6df413910f0b5c5baaf29ed8a096e590d1628d51186de813da283b81bae199eb2d9e5758089048622af17a2a7af316f5145734eafd5aa7bae5443b70eec8edefb396a017f1f79fdb81205eea098d1e3635aa4d1ed7a20752c79c78efe861f671c869908977dc7215ffa2d016910caa9eba7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) munlockall() ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000000)={{0xc4, 0x5}, 'port1\x00', 0x4, 0x60, 0x3, 0x4, 0x6c1, 0x4, 0x8, 0x0, 0xe, 0x40}) recvmsg$kcm(r0, &(0x7f00000008c0)={&(0x7f0000000280)=@x25={0x9, @remote}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000300)=""/255, 0xff}, {&(0x7f0000000400)=""/87, 0x57}, {&(0x7f0000000480)=""/137, 0x89}, {&(0x7f0000000540)=""/82, 0x52}, {&(0x7f0000000100)=""/49, 0x31}, {&(0x7f00000005c0)=""/229, 0xe5}, {&(0x7f00000006c0)=""/178, 0xb2}], 0x7, &(0x7f0000000800)=""/137, 0x89}, 0x3) 07:35:34 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) bind$can_raw(r0, 0x0, 0xfffffffffffffdfd) 07:35:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x400, 0x8, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x1f, 0x208840) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000140)) 07:35:34 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800df83eb5f4b66cc0000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fbdbdf250600000008080000000000000a0009000180c20000010000050037000000000008002c000100000005003000010000000500300000000000050035000800000005002d00010000002dde4692328906324ae74639f8b18b7a8feb1ffa0d373bd87953caf4f9e04d5fb6c95faa99386ab30e8c5753345a256bb6d79a1043f8cacaa8d373a2ee"], 0x58}, 0x1, 0x0, 0x0, 0x4044844}, 0x8000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="200025bd7000fcdbdf2503000000080039000900000008003a000700000008002c00ffffffeb19dac876e46cfb3161147f08003b0006000000"], 0x34}, 0x1, 0x0, 0x0, 0xc5}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f00000003c0)={0x10001, 0x92, 0x7, 0x200}) 07:35:34 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x21}}]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x40080) sched_yield() setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000000)=0x5, 0x4) 07:35:34 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000040)={0x8001, 0x4, 0x1, 'queue1\x00'}) 07:35:34 executing program 4: socket$kcm(0x29, 0x6, 0x0) 07:35:35 executing program 1: openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x800, 0x0) socket$kcm(0x29, 0x7, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0)) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x4010, 0xffffffffffffffff, 0x8) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x2, 0x5}, {0x4, 0x2}, 0x0, 0x0, 0x3}) 07:35:35 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/ldiscs\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) write$qrtrtun(r0, &(0x7f00000000c0)="14febde7aeee8f0353d1ed07698402004ceee906fc0c81ef7836ce624b80fd0aad497f4391c3e3963b79002f12c128d0e6cd89d6e88e86f5ded37dd0a6ab1cfc4636ab2dac872d30c2f3373db3359b0475e5bd25306302f441cb3a65c361bf8c9294eb0ae9ef6073bb1e4db1adbe64c9518f4aeebbb078d43f1c70e4b8b35e548456f2df51b90f2716acc912b66b390ad73634b8dda8d1824416d161bff620ce31e88f4fe90a1f3cfffbe0f1a834bcc8891cfe3fc2a1", 0xb6) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x4, 0x101000) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, 0x0, 0x0) 07:35:35 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r2, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r3, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f00000002c0), 0x4) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r4, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x1, 0x4, 0x4, 0x100, 0x7, {0x0, 0x2710}, {0x1, 0x2, 0x8, 0x0, 0x2, 0x8, "2c84c2e8"}, 0x6, 0x3, @planes=&(0x7f0000000000)={0x6, 0x8, @mem_offset=0xa8, 0x8}, 0xffff, 0x0, 0xffffffffffffffff}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r7, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) sendmsg$can_bcm(r7, &(0x7f0000000280)={&(0x7f0000000140), 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x4, 0xfff, {0x0, 0xea60}, {r8, r9/1000+10000}, {0x0, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x4, 0x0, 0x1}, 0x28, 0x1, 0x0, 0x0, "e213609c744e706b40b84640d370acd005420f8b55378ae56b887f695e482ac3131263198b0b66abfba69c4a4879898de575a694086f709b0830a511c555ba32"}}, 0x80}, 0x1, 0x0, 0x0, 0x8040}, 0x800) connect$can_bcm(r3, &(0x7f0000000100)={0x1d, r5}, 0x10) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000000c0)=[r0, r2, r3, r0, r4, r0, r6, r0, r0], 0x9) 07:35:35 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000080)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 07:35:35 executing program 4: sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x11) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x0, 0x0, 0x400}, 0x14}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x40055) socket$kcm(0x29, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200)='802.15.4 MAC\x00', r1) 07:35:35 executing program 2: socket$kcm(0x29, 0x7, 0x0) 07:35:35 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) 07:35:35 executing program 1: r0 = fork() get_robust_list(r0, &(0x7f0000000480)=&(0x7f0000000440)={&(0x7f00000003c0)={&(0x7f0000000380)}, 0x0, &(0x7f0000000400)}, &(0x7f00000004c0)=0x18) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="3d7b1e83634cdb3a29a263", 0xb, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f00000000c0)={0x0, r1}, &(0x7f0000000100)=""/207, 0xcf, &(0x7f0000000340)={&(0x7f0000000200)={'cbcmac-aes-ce\x00'}, &(0x7f0000000240)="b5ff6fc14cc1439d9670c13e1fdf5ae8927ce3dcbecced0306db6bdcbce2128408c6e04159f91f0449d9e22f1831d7bc01b8c818b799ab7df9a64bf758332d18481492cacebae243961074963cf0a03948d97c268082d4fb35b5723ef9695782df3795cd5554814ad273703c1dcd384ed5050254e46566bbfec7976f4b9921777fae2d7ea85df2c6cd60dca716654af720a5741bcb060af8a68dcdd1c31cb07602027765317273bf60fcfa9d14f9a56a7b4eac12f720936b87abeac04cbdb324e4f8f9385e8979081f546e88d492eba49cfea9f7643969628f6036871f", 0xdd}) socket$kcm(0x29, 0x2, 0x0) 07:35:35 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000000)) socket$kcm(0x29, 0x2, 0x0) 07:35:35 executing program 4: ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000080)={0x10000, 0x3, 0x7ff}) socket$kcm(0x29, 0x2, 0x0) 07:35:35 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/meminfo\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0xfffff800, 0x4) socket$kcm(0x29, 0x7, 0x0) 07:35:35 executing program 2: socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@ethernet={0x0, @dev}, 0x80, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/16, 0x10}, {&(0x7f00000000c0)=""/12, 0xc}, {&(0x7f0000000100)=""/152, 0x98}, {&(0x7f00000014c0)=""/153, 0x99}, {&(0x7f0000000280)=""/203, 0xcb}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/29, 0x1d}], 0x7, &(0x7f0000001440)}, 0x0) 07:35:35 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x0, 0x290041) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000080)={0x7e, 0x1, 'client1\x00', 0x7fffffffc0000005, "0d2cceb55c277bee", "8cd610ec5af25d7cebd2f5d88cdeab42c8d1ef62b11ac009939ef53cd6a488de", 0x8, 0x9}) bind$can_raw(r0, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r1, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) connect$can_bcm(r1, &(0x7f0000000140), 0x10) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000000)={{0x31, 0x6}, {0x8, 0x5}, 0x944, 0x7, 0xa0}) 07:35:35 executing program 4: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="06000000000000000400000000000000406a075a52dd4d76474733ff444b0b0f8f40fc1f28646fc0ede9617c68863ee088b78bdaf15df951cf6e57e5374bf6537a346b75eed8d40341e1d1877a83f2e1e1e810431abfb276f4604cec8c91efde8b3f759031bc00722d9c9df34bd98400a163981c234ffc196957ebe91cb7945a8a5f4ce6035a7e2981ce0e06901864703fd043316e0f60901135b99385857aa460b7b44289df502459c42edfafade44e738f02a6698f2f2cdacde5e6f4ef33cb0a0fa60ef67eadb85c", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) read$qrtrtun(r0, &(0x7f0000000040)=""/248, 0xf8) socket$kcm(0x29, 0x2, 0x0) 07:35:36 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x800, 0x400000) write$sndseq(r0, &(0x7f0000000080)=[{0x14, 0x0, 0x9, 0x68, @tick=0xd9, {0x7, 0x7}, {0x7, 0x85}, @control={0x12, 0x400, 0x5}}, {0x0, 0x3, 0x80, 0x1, @time={0x9e, 0xf}, {0x81, 0xe1}, {0x3f, 0x5}, @addr={0x8, 0x3f}}, {0x3f, 0x3, 0x82, 0x5, @tick=0xd9de, {0x2, 0x1f}, {0x2, 0x5}, @note={0xb7, 0x8, 0x4, 0xfa}}, {0x2, 0x36, 0x0, 0x2, @time={0x7d4, 0x1}, {0x6, 0x5}, {0x20, 0x1}, @raw8={"32cf6dba0e7869e24a6ac364"}}, {0xfe, 0x2, 0x1f, 0x40, @time={0x1000, 0x1c}, {0x3, 0x2}, {0x5, 0x40}, @quote={{0x7, 0x1}, 0x3, &(0x7f0000000040)={0x20, 0x4, 0x5, 0x3, @tick=0x1, {0xf, 0x20}, {0x6, 0x7}, @result={0x1a, 0x2}}}}, {0x6, 0x4, 0x3f, 0x9, @time={0x0, 0x80000001}, {0x3f, 0x1}, {0x4, 0x9d}, @connect={{0x40}, {0x3b, 0x2}}}, {0x6, 0xff, 0x4, 0x4, @tick=0x8, {0x1f, 0x3}, {0x20, 0x3}, @raw32={[0x5, 0x5]}}, {0x6, 0x6, 0xff, 0x8e, @tick=0x4, {0x40, 0x80}, {0x9, 0x80}, @connect={{0xc6}, {0x74, 0x81}}}, {0x7, 0x5, 0x1, 0x81, @tick=0xfffffffd, {0xff, 0x7}, {0x7, 0x5}, @quote={{0x7, 0x2}, 0x1}}, {0x4, 0x6, 0x2, 0x1, @tick=0x6, {0x3}, {0x80, 0x7}, @connect={{}, {0x6, 0x7f}}}], 0x118) socket$kcm(0x29, 0x2, 0x0) 07:35:36 executing program 2: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000040)={0x5, 0x6, 0x3}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000a00)={0x0, @qipcrtr={0x2a, 0xffffffff, 0x7fff}, @ipx={0x4, 0x2, 0xe8f, "5f5e86f517d2", 0x81}, @can, 0x50, 0x0, 0x0, 0x0, 0x3, &(0x7f00000009c0)='geneve1\x00', 0x3, 0x80000000}) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) 07:35:36 executing program 5: getrusage(0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000340)={0x0, 0x1, 0x4, 0x0, 0x1, {r0, r1/1000+10000}, {0x1, 0xc, 0x6, 0x1, 0x3a, 0xba, "aca01b0f"}, 0x0, 0x1, @planes=&(0x7f0000000300)={0x200, 0xe674, @userptr=0x6, 0x200}, 0x80}) r2 = fork() sched_setscheduler(r2, 0x5, &(0x7f00000000c0)=0x8000) r3 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x9, 0x4000) bind$can_raw(r3, &(0x7f0000000200), 0x10) sysinfo(&(0x7f0000000100)=""/188) getrusage(0x1, &(0x7f00000003c0)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000240)={{0x4, 0xfb}, 0x1, 0xfffffffc, 0x1f, {0x4, 0x7f}, 0x9, 0xcd}) ioprio_set$pid(0x1, 0x0, 0x4004) 07:35:36 executing program 1: prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) socket$kcm(0x29, 0x2, 0x0) 07:35:36 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, @ipx={0x4, 0x5, 0x7f, "bcdcd4366a50", 0xff}, @vsock={0x28, 0x0, 0xffffffff}, 0x14, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000000), 0xff, 0x6, 0x55}) 07:35:36 executing program 5: socket$kcm(0x29, 0x1, 0x0) 07:35:36 executing program 1: socket$kcm(0x29, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="020029bd7000fcdbdf250300000006000800a3aa0000"], 0x1c}}, 0x4004800) 07:35:36 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/40, 0x28}], 0x1, &(0x7f0000000140)=""/118, 0x76}, 0x20122) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) 07:35:36 executing program 3: socket$kcm(0x29, 0x2, 0x0) 07:35:36 executing program 5: socket$kcm(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00006abd7000ffdbdf250600000002000900ffffffffffff080000002b00091a000405002d0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x5080}, 0x4008080) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000000c0)={0xffffff81, 0xffffffff, 0x1, 'queue1\x00', 0x83a}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, &(0x7f0000000280)=""/155, 0x9b}, 0x1) 07:35:36 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000700)={&(0x7f00000002c0)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000340)=""/123, 0x7b}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/166, 0xa6}, {&(0x7f00000004c0)=""/150, 0x96}, {&(0x7f0000000580)=""/91, 0x5b}], 0x5, &(0x7f0000000680)=""/102, 0x66}, 0x101) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x24000080) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) 07:35:36 executing program 4: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 0', 0x1b) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x44000) 07:35:36 executing program 1: socket$kcm(0x29, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000180)=0x9, 0x4) r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r1, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="02000008", @ANYRES16=r2, @ANYBLOB="00082dbd7000ffdbdf250b00000005002f0001000000080032000200000008003a004d4800000a000900aaaaaaaaaaaa000008002b000100ffff0500290000000000050038000100000008000600", @ANYRES32=0x0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x40010) r3 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r3, &(0x7f0000000c40)={&(0x7f0000000880)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000900)=""/70, 0x46}, {&(0x7f0000000980)=""/1, 0x1}, {&(0x7f00000009c0)=""/63, 0x3f}, {&(0x7f0000000a00)=""/50, 0x32}, {&(0x7f0000000a40)=""/166, 0xa6}, {&(0x7f0000000b00)}], 0x6, &(0x7f0000000bc0)=""/82, 0x52}, 0x0) socketpair(0xa, 0x3, 0x3, &(0x7f0000000480)={0xffffffffffffffff}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="20022abd7000fbdbdf250c00000008003b008100000008003200ff7f00000800390009000000050038000000000008000b00000000500600280002000000080039000200000005002e0001000000"], 0x54}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="6349ef274d653682cbe0221ac404df6cee5c8b1b0736ff272574b7b942cf8383202637e24094f695afbbc63e113e3106d55a6d4ed1a0ebaedccbac490000", @ANYRES16=r2, @ANYBLOB="00022dbd7000fbdbdf250c0000000a000900bbbbbbbbbbbb000008003100090000000500300000000000"], 0x30}, 0x1, 0x0, 0x0, 0x88}, 0x4044814) 07:35:36 executing program 3: socket$kcm(0x29, 0x0, 0x0) 07:35:36 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x10, &(0x7f0000001400)={&(0x7f0000001380)={0x4, 0x93, 0xfffffffd, {}, {}, {0x1, 0x0, 0x1}, 0x1, @canfd={{0x4, 0x0, 0x1}, 0xc, 0x2, 0x0, 0x0, "70f8f1d5fa25ed747c0391542f3678588c82370aa1e698c23b455c8e7051aee44d72d11806709afce509ab89b9692508a73ea6fa1d4af3a1dd706539cc8095a3"}}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 07:35:36 executing program 4: migrate_pages(0xffffffffffffffff, 0x1, &(0x7f0000000000)=0x100000001, &(0x7f0000000040)=0x2919) socket$kcm(0x29, 0x2, 0x0) 07:35:36 executing program 5: sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1ff}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x200}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004081}, 0x20008000) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x2004c005) 07:35:37 executing program 3: socket$kcm(0x29, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x1, 0x80, 0xbbf, {0x0, 0x2710}, {r1, r2/1000+10000}, {0x1, 0x1, 0x1, 0x1}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "4bde9918d8a4e6bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x8c0) 07:35:37 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40080480}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004140}, 0x800) socket$kcm(0x29, 0x8, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7d249608}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x41}}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004000}, 0x20008815) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xae1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40891}, 0x44000) 07:35:37 executing program 2: ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000000)={0xcd, 0x2, 0x1, {0x8, 0x8}, 0x7, 0xff}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x82) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000000c0)={0x2175be01, 0x1, 'client0\x00', 0x5, "56c51ebb5c231c06", "0f3ba326b27c0371fc0266b9b7d4d6c0ad4cd648e87498d08864abc7d004b1c4", 0x1, 0x5}) socket$kcm(0x29, 0x2, 0x0) 07:35:37 executing program 3: socket$kcm(0x29, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000240)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000280)=""/142, 0x8e}, {&(0x7f00000001c0)=""/54, 0x36}], 0x3}, 0x2) 07:35:37 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240)='802.15.4 MAC\x00', r2) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000001f13000000"], 0x14}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sysvipc/sem\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, 0x0, 0x416, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8009}, 0x2000000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x10c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x5c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "83c38a11616b4fc1fbda3ed78011387c"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e5180068a3317e7f337630989908526a"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d190dd8355572969c9bed2b1ea6bc473"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "4c7b27df14fe41efeac97d257c98aa83"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "bad68f180428612b1e9b07e80a7bba6c"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "07b6dd956f342801e66cd7f51df7bd33"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f8af55486b0944b1d94eb5b3734aa282"}]}, @NL802154_ATTR_SEC_KEY={0x24, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x101}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) 07:35:37 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) bind$can_raw(r0, 0x0, 0x0) 07:35:37 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/seq\x00', 0x2c0400) write$sndseq(r1, &(0x7f0000000240)=[{0x8, 0x5, 0xb9, 0x2f, @tick=0x8, {0x7, 0x1f}, {0x6, 0x4}, @raw8={"13ce3ae19088e71b59f9bfab"}}, {0x9, 0x0, 0x2, 0x7f, @tick=0x401, {0xff, 0x3f}, {0x6, 0x53}, @raw8={"b6832410e03ca615258f5799"}}], 0x38) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x422, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x8004) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc850}, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000280)={{0x82, 0x32}, 0x0, 0x80000000, 0x5a40, {0xaf, 0x80}, 0x8, 0xf8}) 07:35:37 executing program 1: r0 = socket$kcm(0x29, 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0xc40, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', r1) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000001}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004001) 07:35:37 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f00000000c0)={0x4, 0x2, 0x0, 0x3ea, 0xca, 0x4}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6e430bc0dd693f7ac56e108b5c57f8a902cd395544cfb10eed8c6c13517450098807999e7009d062ed1ae2f00cfe6c1fc5a8878e7cd9b86e26679d094b5d12534efab1d49449cf50cf4b", @ANYRES16=0x0, @ANYBLOB="000129bd7000fedbdf250e00000005002a000100000008003100000000000800320000040000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000843) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x28}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x64, r1, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2c8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x800}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffff4}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0xc000) 07:35:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x43, 0x0, 0x20}, 0x14}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES64], 0x36) socket$kcm(0x29, 0x2, 0x0) 07:35:37 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000140)={0x5, 0x4, 0x1, 'queue1\x00'}) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x101, 0x600a02) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, @qipcrtr={0x2a, 0x4, 0xfffffffe}, @ipx={0x4, 0x204, 0x3, "c072cac1d322", 0x40}, @l2tp={0x2, 0x0, @private=0xa010102, 0x2}, 0x8, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)='team_slave_1\x00', 0xe8d8, 0x522}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) socketpair(0x27, 0x6, 0x5, &(0x7f0000000380)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/clients\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) socketpair(0x2a, 0x2, 0x9, &(0x7f00000003c0)) socketpair(0x2c, 0x3, 0x4, &(0x7f0000000000)) init_module(&(0x7f0000000200)='queue1\x00', 0x7, &(0x7f0000000240)='queue1\x00') syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0xb0201) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) bind$can_raw(r4, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x402101, 0x0) 07:35:37 executing program 4: socket$kcm(0x29, 0xc, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000000)={{0x7, 0x7}, 0x1, 0xa3e, 0x6, {0xd2}, 0x3a, 0x1}) 07:35:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440)='NLBL_MGMT\x00', r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x250, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x1f8, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x74, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xb5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x11ed}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7f}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_ID={0xa8, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffd}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80000001}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0xc4, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x9fcba27c1f2d2a72}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x40050}, 0x20048000) socket$kcm(0x29, 0x6, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x20e581, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000080)=0x7) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000040)=0xd65c) 07:35:38 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) 07:35:38 executing program 4: socket$kcm(0x29, 0xa, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020027bd7000fedbdf250500000008000000960a000008003200760e00009f44d7c439087841f1d33967339315aba2af9ab11866c6a9c9910c9da8f269f3afa1d726f97bf5cd21ca360a60ccbe0004668b18179d8c00"/95], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 07:35:38 executing program 3: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 07:35:38 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socketpair(0x8, 0x4, 0x7, &(0x7f0000001540)={0xffffffffffffffff}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000001580), &(0x7f00000015c0)=0xffffffffffffff7b) 07:35:38 executing program 1: seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x1) socket$kcm(0x29, 0x5, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000200)={{0x10, 0x7}, 'port1\x00', 0x80, 0x20060, 0x1000, 0x6, 0x0, 0x5, 0x6, 0x0, 0x3, 0x9}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="06002dbd7000fbdbdf250400000005002e00010000000500b75e050037000000000005002e000100000008002c000400000005002e0000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 07:35:38 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)={0xfc, 0xca, 0xa4}) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x80000000, 0x10200) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0x6, 0xe0}, 'port1\x00', 0x0, 0x10, 0x2, 0x0, 0x8000, 0x1, 0x80000000, 0x0, 0x4, 0x9}) socket$kcm(0x29, 0x2, 0x0) 07:35:38 executing program 4: socket$kcm(0x29, 0x8, 0x0) socket$kcm(0x29, 0x0, 0x0) rt_sigaction(0x3c, &(0x7f00000000c0)={&(0x7f0000000240)="450ffd39660f38145c5cfef62e66f20f1b956930f1b1c402cd3e4384c4e1fc2f9a00000000d8f0660f3822c4c421e37d5f00660fe05100", 0x0, &(0x7f0000000040)="c403b97e2619c4227d58f5c443751849009fc4e249f77e02c441fa2cb106000000660f38f61bc4a11d635f81c4228529a900000000656543fe4707c4c1fbf04d00", {[0x6]}}, &(0x7f00000001c0)={&(0x7f0000000100)="c4a28139082646d875fec441f913b4690500000078ecc402dd8ea309000000c4e131f10a66460f3823da6466460f3a0cc7cec422e10793500e8709470f38038c27f27f0000", 0x0, &(0x7f0000000180)="ded03e360f5ec93e0f0f21b7c441f811d7440f7f3e400f01d00f018f00000100c4a2792a3cf90f987300c4217d2ed2"}, 0x8, &(0x7f0000000200)) 07:35:38 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 07:35:38 executing program 4: socket$kcm(0x29, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000000)={{0x81, 0xfc}, 'port0\x00', 0xc, 0xb2000, 0x5, 0xee, 0xfffffffe, 0x1, 0x7fff, 0x0, 0x1, 0x2}) 07:35:38 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000040)={0x800, 0x0, 0x1}, &(0x7f0000000140)=[{}]) recvmsg$can_bcm(r0, &(0x7f0000001140)={&(0x7f0000000200)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000340)=""/187, 0xbb}, {&(0x7f00000000c0)=""/5, 0x5}, {&(0x7f0000000400)=""/70, 0x46}, {&(0x7f0000000100)=""/45, 0x2d}, {&(0x7f0000000480)=""/176, 0xb0}], 0x6}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000740)='/dev/input/mouse#\x00', 0xfffffffffffffe01, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000080)=0x1, 0x4) connect$can_bcm(r0, &(0x7f0000000000), 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r1}, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x800}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2df}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 07:35:38 executing program 1: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r1, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x99}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x2040000) r2 = socket$kcm(0x29, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x24200) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000080)={{0x7, 0x9}, 0x1, 0x504, 0x4, {0x7, 0x7}, 0x5, 0x9}) 07:35:38 executing program 5: socket$kcm(0x29, 0x0, 0x0) 07:35:38 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00', 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8a015001}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01002abd7000fddbdf250100000006000b0010001bd5ed76faa0cfafa6d1f4d634c47051733091dc24f54447269998d764cab0978f016907ea2c1bd8e98db7bc47e29623f63c92e5bfdfa71af3c66294aae353b9f0e6d339410246d24672c4ca54c2ba612aee8731"], 0x1c}, 0x1, 0x0, 0x0, 0x40008d5}, 0x20000095) socket$kcm(0x29, 0x0, 0x0) 07:35:38 executing program 3: socket$kcm(0x29, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000040)={0xffffffc0, 0x3ff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f0000001940)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000600)=""/25, 0x19}, {&(0x7f0000000640)=""/84, 0x54}, {&(0x7f00000006c0)=""/122, 0x7a}, {&(0x7f0000000740)}, {&(0x7f0000000780)=""/96, 0x60}, {&(0x7f0000000800)=""/88, 0x58}, {&(0x7f0000000880)=""/41, 0x29}], 0x7, &(0x7f0000000940)=""/4096, 0x1000}, 0x2101) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, @can={0x1d, r2}, @generic={0x0, "1b6369e1e35866033fcca84e07de"}, @qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x5, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x9, 0x9, 0x2}) 07:35:38 executing program 5: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000140)=0x1ff) socket$kcm(0x29, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="37030000", @ANYRES16=0x0, @ANYBLOB="000225bd7000fddbdf250d0000000500370001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000040), 0xfffffffffffffee0) 07:35:38 executing program 4: socket$kcm(0x29, 0x2, 0x0) getrusage(0x0, &(0x7f0000000000)) getrusage(0x1, &(0x7f0000002600)) socketpair(0x27, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000000100)=""/104, 0x68}, {&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/71, 0x47}, {&(0x7f0000002380)=""/26, 0x1a}, {&(0x7f00000023c0)=""/201, 0xc9}], 0x8, &(0x7f0000002540)=""/128, 0x80}, 0x40000002) 07:35:38 executing program 2: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x91}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000854}, 0xc014) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000140)={0x5, 0x1f, 0x4}) 07:35:38 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100025bd7000fddbdf250e0080000000091aaaaaaaaaaabb000005002e0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x5) 07:35:38 executing program 1: socket$kcm(0x29, 0x5, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001640)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002cc0)={{{@in6=@dev, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@private}}, &(0x7f0000002dc0)=0xe8) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000600)={{0x20, 0x1f}, 'port1\x00', 0x30, 0x80024, 0x8, 0x407, 0x4, 0xffff9876, 0xf4b9, 0x0, 0x4, 0x6}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fcdbdf250d0000000800170007000000050030000100000005002d00010000000500370001000000050038000000000008003b00018000004f2253e3ac5dd345ccc223a2"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x0, 0x6, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f254c276"}, 0x0, 0x0, @offset, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000040)={0x3f, 0x9, 0x4, 0x103100, 0x0, {0x77359400}, {0x5, 0x8, 0x3, 0x1, 0x9, 0x7, "7671a6e8"}, 0x1, 0x1, @planes=&(0x7f0000000000)={0x8, 0x1, @mem_offset=0x1000, 0x7fffffff}, 0x3, 0x0, r0}) recvmsg$can_raw(r0, &(0x7f0000001d80)={&(0x7f0000001c00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001c80)=""/158, 0x9e}], 0x1}, 0x21) syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x7, 0x20c040) clock_gettime(0x0, &(0x7f0000000300)) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000003c0)={0x6, 0x1, 0x4, 0x400, 0x1, {0x77359400}, {0x2, 0x0, 0x6, 0x1, 0x3f, 0x1, "98c1ac05"}, 0x5, 0x4, @fd=r3, 0x7f, 0x0, r4}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000580)={0x3, 0x5, 0x4, 0x20, 0x9, {}, {0x2, 0xd, 0xfd, 0x0, 0x2, 0x1, "cff59bac"}, 0x3, 0x4, @fd, 0x5e0111a0, 0x0, r7}) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000440)={0x1, 0x2, 0x4, 0x100, 0x4, {0x0, 0x2710}, {0x3, 0xc, 0x1, 0xfb, 0xfa, 0x1, "27c34dfe"}, 0x6, 0x1, @fd=r6, 0xd70f}) sendmsg$can_bcm(r5, &(0x7f0000001ec0)={&(0x7f0000001dc0), 0x10, &(0x7f0000001e80)={&(0x7f0000001e00)={0x4, 0x4c5, 0x8, {0x0, 0xea60}, {}, {0x3}, 0x1, @canfd={{0x0, 0x1, 0x0, 0x1}, 0x3, 0x1, 0x0, 0x0, "5b4584418988f22c579d56d4ec517a00861526972fa2f88e8ed669a891b0b1606181c22458985747c6de12f07fcbfccc9ed14777cdae12122572929fa218ae4a"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x40840) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000002e80)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002e40)={&(0x7f0000000200)=ANY=[@ANYBLOB="c200a5d0e945350001", @ANYRES16=0x0, @ANYBLOB="020029bd7000fcdbdf25110000000500300001000000050029000000000005002d000100000008003c000300000008000600", @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4092}, 0x48000) 07:35:39 executing program 4: socket$kcm(0x29, 0x0, 0x0) 07:35:39 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x40, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)=0x8) socket$kcm(0x29, 0x2, 0x0) 07:35:39 executing program 0: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/132, 0x84}], 0x1, &(0x7f0000000180)=""/116, 0x74}, 0x40000002) bind$can_raw(r0, 0x0, 0x4a) 07:35:39 executing program 2: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000000)) r1 = socket$kcm(0x29, 0x0, 0x0) socketpair(0x4, 0x4, 0x7, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000015c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001580)={&(0x7f0000000500)={0x28, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x38}}]}, 0x28}, 0x1, 0x0, 0x0, 0x5000}, 0x10) 07:35:39 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) socket$kcm(0x29, 0x2, 0x0) 07:35:39 executing program 1: r0 = socket$kcm(0x29, 0xda48776c6c9213fb, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 07:35:39 executing program 3: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000000c0), &(0x7f0000000040)=0xfffffffffffffff0) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x200, 0x0) 07:35:39 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000001c0)={0x2, 0x2, 'client1\x00', 0x4, "a6d4fc5d8ca80f44", "3916dc19b807ee118b18b15ea8a895796d50b85aa1123c504e67813e8aacd483", 0x0, 0x57}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044011}, 0x20004050) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r4, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0, 0xfffffffffffffff9}], 0x2}, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x10840) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, [], 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000011) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0xc0bc5351, &(0x7f00000000c0)={0x10001, 0x0, 'client0\x00', 0xffffffff80000005, "c743d40efd44fa86", "6c519712eb94ff8118896e8dbf6cf00baaa8e7c9842dc52cd156de605461860d", 0xa8, 0x2817}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000040)={0x70, 0x81, 0xff}) 07:35:39 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40300000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4010) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) 07:35:39 executing program 3: prctl$PR_SVE_SET_VL(0x32, 0x267d) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) 07:35:39 executing program 4: socket$kcm(0x29, 0x2, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000080)=""/187, 0xbb}, {&(0x7f0000000140)=""/125, 0x7d}, {&(0x7f00000001c0)=""/201, 0xc9}, {&(0x7f00000002c0)=""/236, 0xec}, {&(0x7f00000003c0)=""/224, 0xe0}, {&(0x7f00000004c0)=""/60, 0x3c}, {&(0x7f0000000500)=""/7, 0x7}, {&(0x7f0000000540)=""/171, 0xab}], 0x8, &(0x7f0000000680)=""/121, 0x79}, 0x100) syz_open_dev$usbmon(&(0x7f0000000740)='/dev/usbmon#\x00', 0x9, 0x422000) 07:35:39 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x5134c1, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)=0x7057) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/handlers\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000140)=ANY=[@ANYBLOB="ff030000530000009d9b20dec6773861f5767be3b8c708f5b6dad3aa6f0a6673158aa869047d54d684bf6908674e5d66ddbd40edc50c2c29499ee260094018bf2601674ae3b446cc6000e4a4740000000020006e9d000000000000"]) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) 07:35:39 executing program 0: syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000)='NLBL_CIPSOv4\x00', 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="10002abd7000fddbdf2d270000000c00050000000000000000000c002d000202aaaeaaaaaaaa0c002d000202aaaaaaaaaaaa05002b00000000002400320071e7df67ba2d85331c2e4912ed2894072f51652b07ce6c338f045bb4f523f5460a0001007770616e330000000c002d0002860d98a2e956747e8ed04c", @ANYRES32=r1, @ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000001}, 0x20048010) 07:35:40 executing program 1: socket$kcm(0x29, 0x0, 0x0) 07:35:40 executing program 3: socket$kcm(0x29, 0x0, 0x0) 07:35:40 executing program 4: socket$kcm(0x29, 0x7, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@isdn, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1, &(0x7f0000000140)=""/90, 0x5a}, 0x40002042) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000200)={{0x1, 0x1}, 'port0\x00', 0x20, 0xc0000, 0x1d8, 0x8, 0x306f, 0xed, 0x84f, 0x0, 0x1, 0x1}) 07:35:40 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4d6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x180}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x60}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x2c}}, 0x85) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xba5b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x84) recvmsg$can_raw(r1, &(0x7f0000001d00)={&(0x7f0000001880)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001900)=""/236, 0xec}, {&(0x7f0000001a00)=""/68, 0x44}, {&(0x7f0000001a80)=""/132, 0x84}, {&(0x7f0000001b40)=""/52, 0x34}, {&(0x7f0000001b80)=""/18, 0x12}], 0x5, &(0x7f0000001c40)=""/142, 0x8e}, 0x10000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x54, r4, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffc01}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xae9a}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffffff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = syz_open_dev$mouse(&(0x7f0000001600)='/dev/input/mouse#\x00', 0x8, 0x42000) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, @ipx={0x4, 0x1000, 0xc5, "be690a1279f7", 0x81}, @tipc=@name={0x1e, 0x2, 0x3, {{0x2, 0x3}}}, @generic={0x18, "28cc24374dfb53e96117a96d28d8"}, 0x2c, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)='veth1_to_batadv\x00', 0x2, 0xff, 0x81}) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000001640)={{{@in=@private, @in6=@remote}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000001740)=0xe8) 07:35:40 executing program 0: getrusage(0x1, &(0x7f0000000000)) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) 07:35:40 executing program 1: socket$kcm(0x29, 0x0, 0x0) r0 = syz_io_uring_setup(0x1046, &(0x7f0000000000)={0x0, 0x449b, 0x4, 0x1, 0x129}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 07:35:40 executing program 5: socket$kcm(0x29, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@private}}, &(0x7f0000000180)=0xe8) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) socketpair(0x6, 0x4, 0x40, &(0x7f0000000000)) 07:35:40 executing program 3: socket$kcm(0x29, 0x0, 0x0) 07:35:40 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/zoneinfo\x00', 0x0, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 07:35:40 executing program 2: socket$kcm(0x29, 0x4, 0x0) 07:35:40 executing program 4: socket$can_raw(0x1d, 0x3, 0x1) 07:35:40 executing program 1: socket$kcm(0x29, 0x0, 0x0) 07:35:40 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000005c0)={{0x81, 0x7f}, {0x2, 0x38}, 0x0, 0x0, 0x80}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000100)={0xb2, 0x10001, 0x15, {0x40c0, 0x4}, 0x2, 0x1}) socket$kcm(0x29, 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/seq\x00', 0x60a801) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000002c0)={0x0, @tick=0x6, 0x1, {0x38, 0x40}, 0x40, 0x0, 0x85}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000000)={{0xfb, 0xff}, 'port1\x00', 0x8, 0x20, 0x6, 0x2, 0x4, 0x1, 0x6a19e14f, 0x0, 0x2, 0x20}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000003c0)={0x81, 0x0, 0x0, 'queue0\x00', 0x7}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000300)={0xb, 0x0, 'client1\x00', 0x7fffffffc0000004, "e610ca2ad95278e4", "fd0bc9f5e5f8ba0b7216e7c06659eb3eba17689980cf9051a11fb89abbd62a31", 0x4, 0x1}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x24000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x202080) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000540)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000480)={0x2f47, 0x1, 'client1\x00', 0x5, "fb8a05dfcd6e37b2", "cc138f7168acd6465b1860783d5c2138289f30bee84afa6b3c75039d1997808a"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f00000001c0)={0x2, 0x0, 0x1000, {0x5, 0x7c0d}, 0x20, 0x24}) 07:35:40 executing program 3: io_uring_setup(0x1a68, &(0x7f0000000000)={0x0, 0xb9bf, 0x8, 0x2, 0x270}) socket$kcm(0x29, 0x2, 0x0) r0 = syz_io_uring_setup(0x1d6f, &(0x7f0000000080)={0x0, 0x307e, 0x1, 0x2, 0xb}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_setup(0x5c1f, &(0x7f0000000180)={0x0, 0x38000000, 0x10, 0x3, 0x14, 0x0, r0}) 07:35:40 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000002f9be65eb8304a8e2fed4be6f7886d7bb417f0e8803a10495b1e6563749ff024be548857eff66ea484ed4f4e1e96e936bd2f423b7d1c4cc9d781242c58f142", @ANYRES16=0x0, @ANYBLOB="000425bd7000fcdbdf250e000000"], 0x14}, 0x1, 0x0, 0x0, 0x1000}, 0x4008000) socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x40000) 07:35:40 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000040)=r1, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in=@broadcast, @in6=@private2}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xe8) socket$kcm(0x29, 0x3, 0x0) 07:35:40 executing program 4: ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000040)={0x1, 0x4, 0x35, {0x6, 0x7}, 0x5, 0x7}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x1, @time={0x1}, 0x2, {0x37, 0x7}, 0x7f, 0x0, 0x8}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000100)={0x65d, 0xfca4, 0x0, 'queue1\x00'}) socket$kcm(0x29, 0x2, 0x0) 07:35:40 executing program 2: socket$kcm(0x29, 0x2, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)=0x50) 07:35:40 executing program 5: socket$kcm(0x29, 0x3, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x8101) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/diskstats\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0)=r0, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r4, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000200)=[r1, r4], 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@private0, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) 07:35:40 executing program 3: socket$kcm(0x29, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000000)={0xe8, 0x2, 'client0\x00', 0xffffffff80000005, "444442b067568822", "2719c1467ae6d62d6f2ae162b61aa33360c32512b948ac7cdb66fb287d050111", 0x9, 0x6}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000180)={0x11, 0x40, 0x2c}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x141) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000100)={{0x9, 0x3f}, 0x0, 0xf10, 0x1000, {0x40, 0x40}, 0x80, 0xff}) 07:35:40 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000040)={0x4, 0x4, 0xfffff800, {0x77359400}, {}, {0x2, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x1, 0x1}, 0x21, 0x2, 0x0, 0x0, "5663f6176239347b564963a7c0aa33ed28c0ddbed016d7420cb4c4c28580b61764a918adfe02e27cbe5834466579d3a5617bb9985d26eaf0ae2993e656246b54"}}, 0x80}, 0x1, 0x0, 0x0, 0x40044}, 0x40) 07:35:40 executing program 1: socket$kcm(0x29, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000000)) socket$kcm(0x29, 0x2, 0x0) 07:35:40 executing program 4: ptrace$getregs(0xe, 0x0, 0x4, &(0x7f0000000000)=""/249) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)={0x0, 0x6, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f254c276"}}) socket$kcm(0x29, 0x7, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)) 07:35:40 executing program 2: socket$kcm(0x29, 0x2, 0x0) socketpair(0x2c, 0x3, 0x9, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000804}, 0x4801) 07:35:40 executing program 3: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7fffffff, 0x2002) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000080), 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) 07:35:40 executing program 1: socket$kcm(0x29, 0x2, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000001a40)={&(0x7f0000000600)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000680)=""/28, 0x1c}, {&(0x7f00000006c0)=""/14, 0xe}, {&(0x7f0000000700)=""/86, 0x56}, {&(0x7f0000000780)=""/117, 0x75}, {&(0x7f0000000800)=""/243, 0xf3}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/169, 0xa9}], 0x7}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0x7f}, {0x1f}, 0x5, 0x6, 0xff}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x204082) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000000)={0xc, @time={0x100, 0x6}, 0x9, {0xc5, 0xfa}, 0x5, 0x2, 0x5}) 07:35:40 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) recvmsg$can_raw(r0, &(0x7f0000000200)={&(0x7f00000000c0)=@isdn, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/41, 0x29}], 0x1, &(0x7f00000001c0)=""/22, 0x16}, 0x101) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @l2={0x1f, 0x9, @fixed={[], 0x11}, 0xff, 0x1}, @nl=@kern={0x10, 0x0, 0x0, 0x400}, @generic={0x18, "5249857d03dce3f7b36652ccbe0b"}, 0x9, 0x0, 0x0, 0x0, 0x40, &(0x7f0000000000)='veth1_to_bridge\x00', 0x4, 0x357, 0x9}) 07:35:40 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x400000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) 07:35:40 executing program 3: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @ax25={0x3, @bcast, 0x2}, @generic={0x2, "517e485552a537c8f9a089fd4123"}, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x12}, 0xfffe, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x8000000005, 0x4fd, 0x4}) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c045}, 0x0) socketpair(0x10, 0xa, 0xff, &(0x7f0000003340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r4, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000200)=[r3, r1, r4], 0x3) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000003480)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003440)={&(0x7f00000033c0)={0x5c, r0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004040) 07:35:41 executing program 2: socket$kcm(0x29, 0x0, 0x0) 07:35:41 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001580)={&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/45, 0x2d}, {&(0x7f00000000c0)=""/149, 0x95}, {&(0x7f0000000180)=""/137, 0x89}, {&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f0000000340)=""/7, 0x7}, {&(0x7f0000000380)=""/167, 0xa7}, {&(0x7f0000000440)=""/98, 0x62}, {&(0x7f00000004c0)=""/53, 0x35}], 0x8, &(0x7f0000000580)=""/4096, 0x1000}, 0x0) 07:35:41 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)=""/30, 0x1e}, {&(0x7f00000000c0)=""/247, 0xf7}, {&(0x7f00000001c0)=""/5, 0x5}, {&(0x7f0000000200)=""/255, 0xff}, {&(0x7f0000000300)=""/146, 0x92}, {&(0x7f00000003c0)=""/196, 0xc4}, {&(0x7f00000004c0)=""/1, 0x1}], 0x7, &(0x7f0000000500)=""/20, 0x14}, 0x10002) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000640)='/dev/input/mouse#\x00', 0x0, 0x100) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) bind$can_raw(r3, 0x0, 0xffffffffffffff52) 07:35:41 executing program 4: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r0, 0x100, 0x70bd23, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x400d5) socket$kcm(0x29, 0x2, 0x0) 07:35:41 executing program 2: socket$kcm(0x29, 0x0, 0x0) 07:35:41 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1, &(0x7f0000000180)=""/126, 0x7e}, 0x40010000) 07:35:41 executing program 2: socket$kcm(0x29, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xfffffffffffffffc, 0x12001) 07:35:41 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) setitimer(0x1, &(0x7f0000000440)={{0x77359400}}, 0x0) setitimer(0x1, &(0x7f00000004c0)={{}, {0x77359400}}, &(0x7f0000000500)) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)=@alg, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/133, 0x85}, {&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000000180)=""/19, 0x13}, {&(0x7f00000001c0)=""/51, 0x33}, {&(0x7f0000000200)=""/46, 0x2e}, {&(0x7f0000000240)=""/19, 0x13}, {&(0x7f0000000280)=""/239, 0xef}, {&(0x7f0000000380)=""/6, 0x6}], 0x8, &(0x7f0000000440)}, 0x2000) 07:35:41 executing program 1: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) recvmsg$can_raw(r0, &(0x7f0000002440)={&(0x7f0000000000)=@caif=@rfm, 0x80, &(0x7f0000002340)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/192, 0xc0}, {&(0x7f0000001140)=""/240, 0xf0}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/228, 0xe4}], 0x5, &(0x7f00000023c0)=""/100, 0x64}, 0x2000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f0000002d00)={&(0x7f0000002480)=@l2tp6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002500)=""/245, 0xf5}, {&(0x7f0000002600)=""/22, 0x16}, {&(0x7f0000002640)=""/179, 0xb3}, {&(0x7f0000002700)=""/204, 0xcc}, {&(0x7f0000002800)=""/138, 0x8a}, {&(0x7f00000028c0)=""/104, 0x68}, {&(0x7f0000002940)=""/157, 0x9d}, {&(0x7f0000002a00)=""/236, 0xec}, {&(0x7f0000002b00)=""/16, 0x10}], 0x9, &(0x7f0000002c00)=""/229, 0xe5}, 0x22) 07:35:41 executing program 2: socket$kcm(0x29, 0x1, 0x0) 07:35:41 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/bus/input/handlers\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xb7, 0x8200) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000001580)=0x7fffff, 0x4) 07:35:42 executing program 3: sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x2c, 0x9, 0x2, 0x1, 0xffffffffffff66f2, 0x2, 0x8, 0x80000001}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x3, @time={0x5, 0x4}, 0x40, {0x20, 0x7f}, 0x8, 0x0, 0xc0}) 07:35:42 executing program 2: socket$kcm(0x29, 0x0, 0x0) 07:35:42 executing program 5: socket$kcm(0x29, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000000)={0x0, 0xaf4, 0x401, {0x328c, 0x6}, 0x3, 0x80000001}) 07:35:42 executing program 0: prctl$PR_SET_ENDIAN(0x14, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) bind$can_raw(r0, 0x0, 0x52) 07:35:42 executing program 3: syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x1ff, 0x48000) socket$kcm(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$inet6(0xa, 0x3, 0x0) 07:35:42 executing program 1: socket$kcm(0x29, 0x5, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/171, 0xab}, {&(0x7f00000001c0)=""/238, 0xee}, {&(0x7f00000002c0)=""/227, 0xe3}, {&(0x7f00000003c0)=""/199, 0xc7}, {&(0x7f00000004c0)=""/96, 0x60}, {&(0x7f0000000540)=""/180, 0xb4}], 0x6, &(0x7f0000000900)=[{&(0x7f0000000680)=""/214, 0xd6}, {&(0x7f0000000780)=""/1, 0x1}, {&(0x7f00000007c0)=""/109, 0x6d}, {&(0x7f0000000840)=""/161, 0xa1}], 0x4, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x200000c0}, 0x800) ptrace(0x4208, r0) 07:35:42 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0xff, 0x80}, {0x82, 0xa5}, 0x5, 0x0, 0x93}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000080)={{0x8, 0x3f}, {0x5, 0x9}, 0x7fffffff, 0x1, 0x3}) socket$kcm(0x29, 0x2, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 07:35:42 executing program 2: socket$kcm(0x29, 0x5, 0x0) 07:35:42 executing program 5: socket$kcm(0x29, 0x5, 0x0) 07:35:42 executing program 0: socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) 07:35:42 executing program 1: socket$kcm(0x29, 0x2, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfe0, 0x20000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cpuinfo\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000080)=0x27f, 0x4) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)={0xfffffffc, 0x3f, 0xff, 0x80000001, 0x0, 0x7}) 07:35:42 executing program 3: socket$kcm(0x29, 0x5, 0x0) 07:35:42 executing program 5: socket$kcm(0x29, 0x0, 0x0) 07:35:42 executing program 2: socket$kcm(0x29, 0x2, 0x0) 07:35:42 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/174, 0xae}], 0x1, &(0x7f0000000180)=""/100, 0x64}, 0x101e3) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000240)=0x1, 0x4) 07:35:42 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) socket$kcm(0x29, 0x2, 0x0) 07:35:42 executing program 1: ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000000)={0x7, 0xfc4e, 0x6, 0x4, 0x800000, 0x1}) socket$kcm(0x29, 0x2, 0x0) 07:35:42 executing program 3: socket$kcm(0x29, 0x5, 0x0) socketpair(0x31, 0x80000, 0x1, &(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x13}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x2}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xb}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000085) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002cc0)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x8000) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x181000) socket$kcm(0x29, 0x6, 0x0) 07:35:42 executing program 4: socket$kcm(0x29, 0x2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x480, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/207, 0xcf}, {&(0x7f00000000c0)=""/117, 0x75}, {&(0x7f0000000240)=""/31, 0x1f}], 0x3, &(0x7f00000002c0)=""/139, 0x8b}, 0x10000) 07:35:42 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000000), 0x4) bind$can_raw(r0, 0x0, 0x1a) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f00000000c0), 0x4) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 07:35:43 executing program 2: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000)='NLBL_MGMT\x00', 0xffffffffffffffff) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) 07:35:43 executing program 5: socket$kcm(0x29, 0x7, 0x0) 07:35:43 executing program 4: socket$kcm(0x29, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x7f, 0xff, 0x4, 0x8, @tick=0x100, {0x1f, 0x6}, {0x0, 0xd}, @queue={0x80, {0x2, 0x1ff}}}], 0x1c) 07:35:43 executing program 1: socket$kcm(0x29, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000040)={{0x3, 0x2}, 'port1\x00', 0x2, 0x0, 0x1, 0x1, 0x3b, 0x7, 0x6, 0x0, 0x2, 0x81}) r0 = eventfd2(0x5, 0x801) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x1, r0, 0x1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x200000) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000140)) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000180)=0x1, 0x4) 07:35:43 executing program 3: socket$kcm(0x29, 0x2, 0x0) 07:35:43 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r1, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x8040}, 0x4) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qrtr-tun\x00', 0x4000) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x208000) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x5, 0x100, 0xaebf, {}, {r3, r4/1000+10000}, {0x3, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x34, 0x2, 0x0, 0x0, "d6b069283f6dd372232a87c2bcc8ae4eef24b059922a52a7107a2d17616a9cdd489125a09e22f7248e8399415f677797bc954124f7d1184d12ecfb2238f55910"}}, 0x80}, 0x1, 0x0, 0x0, 0x4c096}, 0x4004000) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4204}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x4008014) 07:35:43 executing program 2: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) write$eventfd(r0, &(0x7f0000000040)=0xfffffffffffffffc, 0x8) 07:35:43 executing program 5: socket$kcm(0x29, 0x1, 0x0) 07:35:43 executing program 4: socket$kcm(0x29, 0x5, 0x0) 07:35:43 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = syz_io_uring_setup(0x3edb, &(0x7f0000000000)={0x0, 0x8d53, 0x8, 0x1, 0x109e}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f00000001c0)=0x4) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, @in={0x2, 0x4e23, @private=0xa010100}, @isdn={0x22, 0x1, 0x40, 0x1, 0xff}, @generic={0x27, "34f8a0b4853437f9f524387bde6c"}, 0x7, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)='veth1_virt_wifi\x00', 0x81, 0xa5b, 0x8000}) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x80010, r1, 0x10000000) 07:35:43 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000040)) socket$kcm(0x29, 0x2, 0x0) 07:35:43 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@sco={0x1f, @none}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0x24}], 0x1}, 0x10100) 07:35:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000140)={0x38, 0x0, 0x0, 0x0, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x38}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xc0, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0xac, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0e4353ccf0a52563acf591bfb8626a9c"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9989ed527e444a362bc8ba8db126b1743a8be55e8171f493c756fb82415c95f7"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "7f1d7e40448af3d1086350e97a9d2393"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e0033ee408256330defcf45b0149fa92"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "36d8478ae05c64e8911ab961b8bc1f08"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7772d50b5c14e7588c1c5bc1c3ddd5e91db379726dcec4229be8483572dd9fc6"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x44000) 07:35:43 executing program 5: socket$kcm(0x29, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r1, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x4908c1, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/seq\x00', 0x101280) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r4, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/video37\x00', 0x2, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r6, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000400)=[r0, r1, r2, r3, r4, r5, 0xffffffffffffffff, r6], 0x8) 07:35:43 executing program 4: socket$kcm(0x29, 0x7, 0x0) 07:35:43 executing program 1: socket$kcm(0x29, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) recvmsg$can_bcm(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000000)=""/176, 0xb6}, {&(0x7f0000002440)=""/4119, 0x1017}, {&(0x7f00000010c0)=""/178, 0xc9}], 0x3, &(0x7f0000001300)=""/237, 0xed}, 0x2) 07:35:43 executing program 3: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000100)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000040)={0x0, 0x2, 'client0\x00', 0x1, "8aad7773e80945ee", "a18b3c678deb157ec50f69e5a9eb73ebe5f2c7a6c8153e076b0ad4bdb49c799c", 0x7a2c, 0x8}) 07:35:43 executing program 4: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000180), 0x10) pselect6(0x40, &(0x7f0000000000)={0x20000007, 0x6, 0x4, 0x5, 0x4, 0x100000000, 0x4, 0x803}, &(0x7f0000000040)={0x80000000, 0xfff, 0x37, 0x7, 0x4, 0x4d9, 0x400, 0x200}, &(0x7f0000000080)={0x7, 0x2, 0x3, 0x1f, 0x5, 0x80000001, 0x4, 0x800}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x4]}, 0x8}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x80010, r0, 0x0) 07:35:43 executing program 0: r0 = syz_io_uring_setup(0x531d, &(0x7f0000000000)={0x0, 0x8696, 0x0, 0x2, 0x16c}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0], 0x1) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) 07:35:43 executing program 3: socket$kcm(0x29, 0x2, 0x0) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x482400) 07:35:43 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) 07:35:43 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x60, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x1d}}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffff7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20008804) 07:35:43 executing program 0: r0 = syz_io_uring_setup(0x28ec, &(0x7f0000000000)={0x0, 0xb4ea, 0x8, 0x3, 0x23e}, &(0x7f0000003000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/150, 0x96}], 0x1) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) 07:35:44 executing program 2: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/crypto\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="200026bd7000fddbdf250500000008003c00c5000000050030000800000005002a000100000008003c000400000008000600", @ANYRES32=0x0, @ANYBLOB="05002f0001007f00050038000100000008000300e79e7b1564510a7c40a7794c857c4aed9cf10bbb1a387ae2bfb5347a7b4daa1abc1aba31922378b2a7f27402e0cf302e6b4ae52fb5a03e5c8cc2e87804da793cb700000000", @ANYRES32=0x0, @ANYBLOB="060028000100000008003c0001800000"], 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000040) socket$kcm(0x29, 0x0, 0x0) 07:35:44 executing program 4: ptrace$getregs(0x2, 0x0, 0x2, &(0x7f0000000000)=""/238) ioprio_set$pid(0x1, 0xffffffffffffffff, 0x2000) migrate_pages(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x6, &(0x7f0000000140)=0x2) socket$kcm(0x29, 0x2, 0x0) 07:35:44 executing program 5: r0 = socket$kcm(0x29, 0x6, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) r3 = eventfd(0x6) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r4, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r5, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[r4, r3, r0, r1, r0, r5, r2, r1, r1, r6], 0xa) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f0000000280)={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ba963899"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f0000000280)={0xffffffff, 0x0, 0x4, 0x1000, 0x3ff, {0x77359400}, {0x0, 0x1, 0x0, 0x0, 0xfd, 0x0, "00000002"}, 0x1, 0x3, @userptr=0x2}) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00', r1) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r8, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000054) 07:35:44 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = io_uring_setup(0x6191, &(0x7f00000001c0)={0x0, 0x8732, 0x1, 0x3, 0x2f}) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000100)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/clients\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500)='batadv\x00', r2) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000003700)={0x0, @xdp={0x2c, 0x1, 0x0, 0x3b}, @vsock={0x28, 0x0, 0xffffffff, @host}, @ethernet={0x1, @broadcast}, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000036c0)='ipvlan1\x00', 0x8, 0x5, 0x401}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000280)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003800)={&(0x7f0000003780)={0x4c, r5, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44064) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000180), 0x4) socket$can_raw(0x1d, 0x3, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x82001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000240)={'batadv0\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/seq\x00', 0x420040) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000300)) bind$can_raw(0xffffffffffffffff, 0x0, 0xe81beebb889c16dc) 07:35:44 executing program 1: socket$kcm(0x29, 0x2, 0x0) 07:35:44 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/consoles\x00', 0x0, 0x0) wait4(0x0, &(0x7f0000000080), 0x1000000, &(0x7f0000000280)) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="0d477e024f6201a795705eca0766898ec65da9dd8e0a9a374455e4de15b9b4b9dc82c5f1a8225e3f4bb87f527f7c5cd4431862e7ffb00738730c3c785f887e7a2661f953b7cdf61b9a163c9ff04a8bbd07623c2c617d5a773183b28fe9938ea1bbfa2c78c11f90e1416df95f6eec8a9519ed457d4fad357a301a9828ce99aef22daf4d8204b199ac86f8581d92db7176acd50e0ff0ca643a8bc3409d630424f10061e65904bf3958ed17a413ae742149927f2acced9a2e2cba0f14ca3c10eb5f9e4dd98af5cc475f3886c085d168f0a3f53e9d4022033cb046f1e9b7a1651609ea50e81164ec3043b364cf37cc630954424a", @ANYRES16=0x0, @ANYBLOB="20004dbd7000fedbdf2501000000080039005968590133dcc6050300000008003c00000080c58b3dc3c310088ab6dc73f62a3f5328211f7bc88239ce4957dd61d316855a2692f886ef7801ff445cfc"], 0x24}}, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sysfs$3(0x3) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x4, 0x20042) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000100)=r0, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 07:35:44 executing program 4: socket$kcm(0x29, 0x0, 0x0) 07:35:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x4000011) socket$kcm(0x29, 0x2, 0x0) 07:35:44 executing program 2: r0 = syz_io_uring_setup(0x4c74, &(0x7f0000000240)={0x0, 0x7e13, 0x2, 0x6, 0x1f6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000000)=@ieee802154, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/51, 0x33}, {&(0x7f00000000c0)=""/27, 0x1b}], 0x2, &(0x7f0000000140)=""/129, 0x81}, 0x40000143) 07:35:44 executing program 4: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100)='802.15.4 MAC\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000140)='NET_DM\x00', r1) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x490c1) 07:35:44 executing program 1: socket$kcm(0x29, 0x4, 0x0) 07:35:44 executing program 3: socket$kcm(0x29, 0x0, 0x0) 07:35:44 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) bind$can_raw(r0, 0x0, 0x0) 07:35:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000005c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880)='802.15.4 MAC\x00', r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ac0)={'wpan0\x00'}) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000)='NLBL_CALIPSO\x00', 0xffffffffffffffff) socket$kcm(0x29, 0x2, 0x0) 07:35:45 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001300)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000080)=""/13, 0xd}, {&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/159, 0x9f}, {&(0x7f0000001200)=""/82, 0x52}], 0x5}, 0x0) 07:35:45 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @vsock={0x28, 0x0, 0x2710, @host}, @tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x3}}, @generic={0x21, "1af995ce834bb389c2ac585cdce4"}, 0x80, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='team0\x00', 0x7, 0x6, 0xdfdf}) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f00000002c0), 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/vmstat\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80)='batadv\x00', 0xffffffffffffffff) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) socket$inet6(0xa, 0x80000, 0x800) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xfffffffffffffe6e) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/slabinfo\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00', r2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r7, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00012cbd7000fdc5df250b0000000800320009000000050033000000000006002800000000000500370000000000"], 0x34}}, 0x4080) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000001bc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="b4e72abd7000fddb70b88044c1c8f8b6f1ab5edab5df250900000008000600", @ANYRES32=r6, @ANYBLOB="060028000300000008002b0000010000050037000000000008003100e018ae5906002800040000000500300001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) 07:35:45 executing program 3: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001480)='/proc/asound/seq/clients\x00', 0x0, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000014c0), &(0x7f0000001500)=0x4) 07:35:45 executing program 2: socket$kcm(0x29, 0x7, 0x0) 07:35:45 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) 07:35:45 executing program 1: r0 = socket$kcm(0x29, 0x7, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = syz_io_uring_setup(0x9, &(0x7f0000001780)={0x0, 0x67e1, 0x10, 0x0, 0x40364}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001400), &(0x7f0000001380)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r1, 0x8000000) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000001a00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000249d0000000000000000000000000000000000000000000000000000000000000000000000f9ff000000e0ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000fe00000005004400000000000000688c2f99ac3390b2000400000000000d0000000000008e97d6975d305d909648269458d697f9412507a1efef5c0addffbce0c2dafe2d1f1c"], 0x17) recvmsg$kcm(r0, &(0x7f00000013c0)={&(0x7f0000000000)=@qipcrtr, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000001800)=""/31, 0x1f}, {&(0x7f00000001c0)=""/181, 0xb5}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/79, 0x4f}, {&(0x7f0000001340)=""/38, 0x26}, {&(0x7f0000001440)=""/71, 0x47}, {&(0x7f0000000180)=""/37, 0x25}, {&(0x7f00000014c0)=""/154, 0x9a}, {&(0x7f0000001580)=""/208, 0xd0}, {&(0x7f0000001680)=""/24, 0x18}], 0xb}, 0x10000) 07:35:45 executing program 2: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000000)={0xfff, 0x2, {0x3, 0x3, 0x8002, 0x0, 0xffff}, 0x5}) socket$kcm(0x29, 0x2, 0x0) 07:35:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x800) socket$kcm(0x29, 0x5, 0x0) 07:35:45 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = io_uring_setup(0xe97, &(0x7f0000000240)={0x0, 0xbe84, 0x4, 0x1, 0x34a}) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000180)={0x0, 0x0, 0x0, [], [{}, {}, {}, {}]}, 0x4) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) socket$kcm(0x29, 0x5, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x24002) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000f6a6c338abf005b45b45157624b89aa794c9c269f40086e4a2cdd5517ec6821ef5ce20f9280ab53d9ca25ea1a6a6c239e9d9ccca34816ba2", @ANYRES16=r2, @ANYBLOB="000829bd7000fbdbdf250800000008002b000100000008000600", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x40001) socketpair(0x8, 0x2, 0x5, &(0x7f00000003c0)={0xffffffffffffffff}) recvmsg$kcm(r4, &(0x7f0000000840)={&(0x7f0000000400)=@ax25={{0x3, @rose}, [@netrom, @remote, @rose, @default, @remote, @netrom, @default, @default]}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000480)=""/243, 0xf3}, {&(0x7f0000000580)=""/47, 0x2f}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000600)=""/255, 0xff}], 0x4, &(0x7f0000000740)=""/246, 0xf6}, 0x12000) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/seq\x00', 0x220001) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000300)={{0x8}, 'port1\x00', 0x2, 0x4, 0x80000001, 0x8, 0x5, 0x9, 0x0, 0x0, 0x0, 0x7f}) 07:35:45 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000580)='/dev/input/mouse#\x00', 0x4, 0x408000) recvmsg$kcm(r1, &(0x7f0000001b40)={&(0x7f00000005c0)=@tipc=@id, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/158, 0x9e}, {&(0x7f0000000700)=""/17, 0x11}, {&(0x7f0000000740)=""/195, 0xc3}, {&(0x7f0000000840)=""/180, 0xb4}, {&(0x7f0000000900)=""/52, 0x34}, {&(0x7f0000000940)=""/28, 0x1c}, {&(0x7f0000000980)=""/58, 0x3a}, {&(0x7f00000009c0)=""/30, 0x1e}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/72, 0x48}], 0xa}, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000026c0)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f00000027c0)=0xe8) bind$can_raw(r0, &(0x7f0000002800)={0x1d, r2}, 0x10) 07:35:45 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) 07:35:45 executing program 3: socket$kcm(0x29, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)={0x8, 0x9, 0x6e}) [ 316.714593][ T3267] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.720938][ T3267] ieee802154 phy1 wpan1: encryption failed: -22 07:35:46 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x18085}, 0x801) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180)='NLBL_CALIPSO\x00', r3) 07:35:46 executing program 1: socket$kcm(0x29, 0x2, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000040)={0x6, 0x309, 0x5, {0x77359400}, {0x0, 0xea60}, {0x3, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "cf5f258e54c84e7d"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000140)=0x1, 0x4) 07:35:46 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) bind$can_raw(r0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000000)={0x8, 0x100, 0x1, 0x7fffffff, 0x81, 0x8}) 07:35:46 executing program 2: socket$kcm(0x29, 0x2, 0x0) r0 = socket$inet6(0xa, 0xf, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast1, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc9082}, 0x20040041) 07:35:46 executing program 3: socket$kcm(0x29, 0x7, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x1, 0x0, 0x7f, 0x7ff, 0x8, 0x3, 0x1f, 0xa18, 0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x8, 0x8000, 0xfffffffffffffe01, 0x1, 0x0, 0x0, 0x3ff}, 0x0) 07:35:46 executing program 4: socket$kcm(0x29, 0x2, 0x0) 07:35:46 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = io_uring_setup(0xe97, &(0x7f0000000240)={0x0, 0xbe84, 0x4, 0x1, 0x34a}) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000180)={0x0, 0x0, 0x0, [], [{}, {}, {}, {}]}, 0x4) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) socket$kcm(0x29, 0x5, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x24002) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000f6a6c338abf005b45b45157624b89aa794c9c269f40086e4a2cdd5517ec6821ef5ce20f9280ab53d9ca25ea1a6a6c239e9d9ccca34816ba2", @ANYRES16=r2, @ANYBLOB="000829bd7000fbdbdf250800000008002b000100000008000600", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x40001) socketpair(0x8, 0x2, 0x5, &(0x7f00000003c0)={0xffffffffffffffff}) recvmsg$kcm(r4, &(0x7f0000000840)={&(0x7f0000000400)=@ax25={{0x3, @rose}, [@netrom, @remote, @rose, @default, @remote, @netrom, @default, @default]}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000480)=""/243, 0xf3}, {&(0x7f0000000580)=""/47, 0x2f}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000600)=""/255, 0xff}], 0x4, &(0x7f0000000740)=""/246, 0xf6}, 0x12000) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/seq\x00', 0x220001) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000300)={{0x8}, 'port1\x00', 0x2, 0x4, 0x80000001, 0x8, 0x5, 0x9, 0x0, 0x0, 0x0, 0x7f}) 07:35:46 executing program 3: r0 = fork() get_robust_list(r0, &(0x7f00000001c0)=&(0x7f0000000180)={&(0x7f0000000140)={&(0x7f0000000100)}}, &(0x7f0000000200)=0x18) fork() socket$kcm(0x29, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x80, @time={0x8001, 0x8}, 0x13, {0xbc, 0x3f}, 0xff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000080)={0x6, 0x2, 0x400, {0x401, 0x5}, 0x3}) 07:35:46 executing program 4: prctl$PR_GET_KEEPCAPS(0x7) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, [], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x1e) 07:35:46 executing program 2: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0402e19660ebf1c25ad400000000000800310006000000000000000000000000000000000005cce90a4e9d9343a09aa038f95576dcaa181491935aa2bb2acdbeafb2dd40a5cded875356ff4588615f29e9254c8e30a68548c7d7f4215187ff9e99b4c00323ea3c8cf0d77c540f0d338cfb7be5115f4aa2b473498712b906fa99b983a78b8ef288c9c171a87f4150ea95d5485880f1d7bd84b6e8cad56514d28c3df4e7b105003b0b0c2ee609a7a6739d11ad1a"], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x40054) socket$kcm(0x29, 0x2, 0x0) 07:35:46 executing program 1: socket$kcm(0x29, 0x1, 0x0) 07:35:46 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x30, 0xffffffffffffffff, 0x8000000) socket$kcm(0x29, 0x0, 0x0) 07:35:46 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = io_uring_setup(0xe97, &(0x7f0000000240)={0x0, 0xbe84, 0x4, 0x1, 0x34a}) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000180)={0x0, 0x0, 0x0, [], [{}, {}, {}, {}]}, 0x4) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) socket$kcm(0x29, 0x5, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x24002) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000f6a6c338abf005b45b45157624b89aa794c9c269f40086e4a2cdd5517ec6821ef5ce20f9280ab53d9ca25ea1a6a6c239e9d9ccca34816ba2", @ANYRES16=r2, @ANYBLOB="000829bd7000fbdbdf250800000008002b000100000008000600", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x40001) socketpair(0x8, 0x2, 0x5, &(0x7f00000003c0)={0xffffffffffffffff}) recvmsg$kcm(r4, &(0x7f0000000840)={&(0x7f0000000400)=@ax25={{0x3, @rose}, [@netrom, @remote, @rose, @default, @remote, @netrom, @default, @default]}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000480)=""/243, 0xf3}, {&(0x7f0000000580)=""/47, 0x2f}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000600)=""/255, 0xff}], 0x4, &(0x7f0000000740)=""/246, 0xf6}, 0x12000) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/seq\x00', 0x220001) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000300)={{0x8}, 'port1\x00', 0x2, 0x4, 0x80000001, 0x8, 0x5, 0x9, 0x0, 0x0, 0x0, 0x7f}) 07:35:46 executing program 1: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="ba557ca7a93b178e0dbca633fbaf59ae2dd03d106e1ca59aea93b63115964c81a065313dbd66c5b3e6dd0eda7eecec2c1ce8e9c976b5a0838abf54c695738b9a4a05661c2d44f8310209dd046f10ac3ed9b76ee912e349d96bace9a2387624362af7d1dcef0d0be3716ce6d831b4c5670ec871c283f360a6846dd8f8b4fcadd038de811305b6188077d4b95b78a5ee3a9bbb85a7b9b3166ca7fe61f3a1ace4423b86eeb1f6538bc1a51517f0887717", 0xaf, 0xfffffffffffffff8) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="a49eff747d39653245128cc20703fe86f678c73e257f12090700db7cffe3f5d980856ced789ba4dedcd76d4ef85ab8761fdf8f3af9cf279504479c245b2f28a3fb66f5bb537df12174b241711641be63961a4016f2394b28fbb703868704de71b708077bb126f2e9b9efe61872355f86b776939d8dbf1e536c57700d4dace9f1e2605fd9ec57491db0889a92cd6259cd5805d07d5c637e4dca08916ef01b3b11303a939891ee8a6a061e1680c7de695b65bbddf6642a682a399d115e4180a2a7953c371d4251761fb5c57a9cd9477c16d3e210bbf9013e2bd0a9c0715e8b1d9a8ff35a59e181e3c950b97f", 0xeb, 0xfffffffffffffffa) 07:35:46 executing program 2: socket$kcm(0x29, 0x5, 0x0) 07:35:46 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x4, 0x1}, {0x7, 0x1}, 0x401, 0x0, 0x86}) socket$kcm(0x29, 0x5, 0x0) 07:35:46 executing program 4: socket$kcm(0x29, 0x2, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="080025bd7000ffdbdf250003002a00d8d17bcb2f66d56762"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000801) 07:35:46 executing program 3: prctl$PR_GET_KEEPCAPS(0x7) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x50, r0, 0x1) socket$kcm(0x29, 0x2, 0x0) 07:35:47 executing program 1: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4bd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x8040) 07:35:47 executing program 2: socket$kcm(0x29, 0x0, 0x0) 07:35:47 executing program 5: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000080)={0x7fffffff, 0x2, 'client0\x00', 0x2, "025100", "621a49614e1ec0db520825a9bfd5005610a7ec635c888fa8987a86778f86bbe0", 0x9, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f00000002c0)={0x15c02776, 0xfffff001, 0xffff7c15, 0xfffffe01, 0xfffffffc, 0x5}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000140)={0x8, 0x7, 0x0, 'queue0\x00', 0x80}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000200)={0x2a7, @tick=0x71f0, 0x7, {0x7, 0x1}, 0x0, 0x1, 0x1}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000240)={0x8, 0x82, 0x3, 0x81, 0x5, 0x80}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000000)={0x0, 0x677, 0x401, 0xff, 0x2, 0xfffffff7}) 07:35:47 executing program 4: socket$kcm(0x29, 0x2, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socketpair(0x3, 0x2, 0x0, &(0x7f00000000c0)) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r2, &(0x7f0000001140)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000001000)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 07:35:47 executing program 3: socket$kcm(0x29, 0x0, 0x0) socketpair(0x1e, 0xe, 0x1f, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f00000002c0)) recvmsg$can_bcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/13, 0xd}], 0x1, &(0x7f0000000140)=""/193, 0xc1}, 0x3) 07:35:47 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = io_uring_setup(0xe97, &(0x7f0000000240)={0x0, 0xbe84, 0x4, 0x1, 0x34a}) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000180)={0x0, 0x0, 0x0, [], [{}, {}, {}, {}]}, 0x4) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) socket$kcm(0x29, 0x5, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x24002) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000f6a6c338abf005b45b45157624b89aa794c9c269f40086e4a2cdd5517ec6821ef5ce20f9280ab53d9ca25ea1a6a6c239e9d9ccca34816ba2", @ANYRES16=r2, @ANYBLOB="000829bd7000fbdbdf250800000008002b000100000008000600", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x40001) socketpair(0x8, 0x2, 0x5, &(0x7f00000003c0)={0xffffffffffffffff}) recvmsg$kcm(r4, &(0x7f0000000840)={&(0x7f0000000400)=@ax25={{0x3, @rose}, [@netrom, @remote, @rose, @default, @remote, @netrom, @default, @default]}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000480)=""/243, 0xf3}, {&(0x7f0000000580)=""/47, 0x2f}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000600)=""/255, 0xff}], 0x4, &(0x7f0000000740)=""/246, 0xf6}, 0x12000) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/seq\x00', 0x220001) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000300)={{0x8}, 'port1\x00', 0x2, 0x4, 0x80000001, 0x8, 0x5, 0x9, 0x0, 0x0, 0x0, 0x7f}) 07:35:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000040)=ANY=[@ANYBLOB="14400006bc33199c1dbe032557c199a563011ebe9af6f058042e4c3a7e0102b5f44806fe675845998a6fbafd1025cefd402807b8ebf054a400d1900f1680fa9bcff49a98ec3763bfc2b0057ef8295843f6827ad0eec44921beb603f2126b20c631", @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000"], 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x290, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x140, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10b27183}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75d03598}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c3a73f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a68c81d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x58c97b36}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f413766}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77ecebf7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5bcc0c86}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x746f610a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1dd6b8f3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79c8ab2c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6bfe6306}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc7cb4b7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xeb4335e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x481c68f7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c1a5d10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d195c55}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5bf0cb90}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71757f07}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d480507}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x120, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48589b80}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c42b4c3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d35c7c7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x167b352b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32ba528b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59f5f48e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32dcb0c5}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x49}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x965ef2d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45875491}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cd3ba71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22ec44f8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1354fca3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2f}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c2aeb7a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}]}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x6d3e33a98216652}, 0x8000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00', r0) socket$kcm(0x29, 0x2, 0x0) 07:35:47 executing program 2: socket$kcm(0x29, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000100)=""/242, 0xf2}, {&(0x7f0000000200)=""/28, 0x1c}, {&(0x7f0000000240)=""/166, 0xa6}, {&(0x7f0000000300)=""/35, 0x23}, {&(0x7f0000000340)=""/218, 0xda}, {&(0x7f0000000440)=""/8, 0x8}, {&(0x7f0000000480)=""/91, 0x5b}], 0x8, &(0x7f0000000580)=""/139, 0x8b}, 0x40010063) 07:35:47 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = io_uring_setup(0xe97, &(0x7f0000000240)={0x0, 0xbe84, 0x4, 0x1, 0x34a}) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000180)={0x0, 0x0, 0x0, [], [{}, {}, {}, {}]}, 0x4) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) socket$kcm(0x29, 0x5, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x24002) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000f6a6c338abf005b45b45157624b89aa794c9c269f40086e4a2cdd5517ec6821ef5ce20f9280ab53d9ca25ea1a6a6c239e9d9ccca34816ba2", @ANYRES16=r2, @ANYBLOB="000829bd7000fbdbdf250800000008002b000100000008000600", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x40001) socketpair(0x8, 0x2, 0x5, &(0x7f00000003c0)={0xffffffffffffffff}) recvmsg$kcm(r4, &(0x7f0000000840)={&(0x7f0000000400)=@ax25={{0x3, @rose}, [@netrom, @remote, @rose, @default, @remote, @netrom, @default, @default]}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000480)=""/243, 0xf3}, {&(0x7f0000000580)=""/47, 0x2f}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000600)=""/255, 0xff}], 0x4, &(0x7f0000000740)=""/246, 0xf6}, 0x12000) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/seq\x00', 0x220001) 07:35:47 executing program 5: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000140)={0x5, 0x1, 'client1\x00', 0xffffffff80000005, "f586e2a084320250", "44a3342d15950bff7340b88e61a350f754a28eab9696783a8f5ae000625ca176", 0x6}) socket$kcm(0x29, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000880}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r2, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x7}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x20}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x7f}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x3}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x9}, 0x1004c001) 07:35:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11248}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x1cc, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x174, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x400}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xff}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_ID={0x6c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xab02}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x19b2e737311f8387}]}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x101}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x80}, 0x24020804) socket$kcm(0x29, 0x2, 0x0) 07:35:47 executing program 1: init_module(&(0x7f0000000000)='*/\f.!.&-&T&\x00', 0xc, &(0x7f0000000040)='(]+\x00') openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/qrtr-tun\x00', 0x40) init_module(&(0x7f0000000100)='(]+\x00', 0x4, &(0x7f0000000140)='\'\x00') ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000180)={0x2, 0x1, 0xd31d, 0x80000000, 0xffff0000, 0x80000001}) r0 = syz_open_dev$mouse(&(0x7f0000000440)='/dev/input/mouse#\x00', 0x7, 0x24002) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000480)={0x9, 0x3, 0x4, 0x3, 0x9, 0x3}) init_module(&(0x7f0000000080)='*/\f.!.&-&T&\x00', 0xc, &(0x7f00000000c0)='*/\f.!.&-&T&\x00') r1 = syz_io_uring_setup(0x15cf, &(0x7f0000000200)={0x0, 0xfc46, 0x2, 0x0, 0x246}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000300)={0x0, 0x0, 0x0, [], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x1f) 07:35:47 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffb}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x4c000) socket$kcm(0x29, 0x2, 0x0) 07:35:47 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = io_uring_setup(0xe97, &(0x7f0000000240)={0x0, 0xbe84, 0x4, 0x1, 0x34a}) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000180)={0x0, 0x0, 0x0, [], [{}, {}, {}, {}]}, 0x4) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) socket$kcm(0x29, 0x5, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x24002) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000f6a6c338abf005b45b45157624b89aa794c9c269f40086e4a2cdd5517ec6821ef5ce20f9280ab53d9ca25ea1a6a6c239e9d9ccca34816ba2", @ANYRES16=r2, @ANYBLOB="000829bd7000fbdbdf250800000008002b000100000008000600", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x40001) socketpair(0x8, 0x2, 0x5, &(0x7f00000003c0)={0xffffffffffffffff}) recvmsg$kcm(r4, &(0x7f0000000840)={&(0x7f0000000400)=@ax25={{0x3, @rose}, [@netrom, @remote, @rose, @default, @remote, @netrom, @default, @default]}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000480)=""/243, 0xf3}, {&(0x7f0000000580)=""/47, 0x2f}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000600)=""/255, 0xff}], 0x4, &(0x7f0000000740)=""/246, 0xf6}, 0x12000) 07:35:47 executing program 5: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000140)={0x5, 0x1, 'client1\x00', 0xffffffff80000005, "f586e2a084320250", "44a3342d15950bff7340b88e61a350f754a28eab9696783a8f5ae000625ca176", 0x6}) socket$kcm(0x29, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000880}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r2, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x7}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x20}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x7f}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x3}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x9}, 0x1004c001) [ 318.477717][T22330] ================================================================== [ 318.486085][T22330] BUG: KASAN: use-after-free in __mutex_unlock_slowpath+0x8e/0x610 [ 318.494010][T22330] Read of size 8 at addr ffff8881411a1008 by task iou-sqp-22323/22330 [ 318.502176][T22330] [ 318.504507][T22330] CPU: 1 PID: 22330 Comm: iou-sqp-22323 Not tainted 5.12.0-rc1-next-20210304-syzkaller #0 [ 318.514410][T22330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.524476][T22330] Call Trace: [ 318.527765][T22330] dump_stack+0xfa/0x151 [ 318.532039][T22330] ? __mutex_unlock_slowpath+0x8e/0x610 [ 318.537612][T22330] print_address_description.constprop.0.cold+0x5b/0x2f8 [ 318.544704][T22330] ? __mutex_unlock_slowpath+0x8e/0x610 [ 318.550273][T22330] ? __mutex_unlock_slowpath+0x8e/0x610 [ 318.555841][T22330] kasan_report.cold+0x7c/0xd8 [ 318.560636][T22330] ? __mutex_unlock_slowpath+0x8e/0x610 [ 318.566213][T22330] kasan_check_range+0x13d/0x180 [ 318.571172][T22330] __mutex_unlock_slowpath+0x8e/0x610 [ 318.576567][T22330] ? preempt_schedule_common+0x59/0xc0 [ 318.582046][T22330] ? wait_for_completion_io+0x270/0x270 [ 318.587624][T22330] io_sq_thread+0x1292/0x1a50 [ 318.592399][T22330] ? io_submit_sqes+0x6320/0x6320 [ 318.597438][T22330] ? lock_release+0x3bb/0x710 [ 318.602133][T22330] ? ret_from_fork+0x8/0x30 [ 318.606705][T22330] ? finish_wait+0x260/0x260 [ 318.611317][T22330] ? rwlock_bug.part.0+0x90/0x90 [ 318.616711][T22330] ? _raw_spin_unlock_irq+0x1f/0x40 [ 318.621924][T22330] ? io_submit_sqes+0x6320/0x6320 [ 318.626970][T22330] ret_from_fork+0x1f/0x30 [ 318.631418][T22330] [ 318.633744][T22330] Allocated by task 22323: [ 318.638161][T22330] kasan_save_stack+0x1b/0x40 [ 318.642849][T22330] __kasan_kmalloc+0x99/0xc0 [ 318.647450][T22330] io_uring_setup+0x1621/0x2950 [ 318.652316][T22330] do_syscall_64+0x2d/0x70 [ 318.656758][T22330] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 318.662664][T22330] [ 318.664995][T22330] Freed by task 22323: [ 318.669060][T22330] kasan_save_stack+0x1b/0x40 [ 318.674968][T22330] kasan_set_track+0x1c/0x30 [ 318.679570][T22330] kasan_set_free_info+0x20/0x30 [ 318.684611][T22330] __kasan_slab_free+0xf5/0x130 [ 318.689493][T22330] slab_free_freelist_hook+0x72/0x1b0 [ 318.694935][T22330] kfree+0xe5/0x7b0 [ 318.698782][T22330] io_sq_thread_finish+0x3af/0x480 [ 318.703905][T22330] io_uring_setup+0x228f/0x2950 [ 318.708771][T22330] do_syscall_64+0x2d/0x70 [ 318.713201][T22330] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 318.719107][T22330] [ 318.721432][T22330] The buggy address belongs to the object at ffff8881411a1000 [ 318.721432][T22330] which belongs to the cache kmalloc-1k of size 1024 [ 318.735489][T22330] The buggy address is located 8 bytes inside of [ 318.735489][T22330] 1024-byte region [ffff8881411a1000, ffff8881411a1400) [ 318.748690][T22330] The buggy address belongs to the page: [ 318.754327][T22330] page:00000000123017dd refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8881411a1800 pfn:0x1411a0 [ 318.765886][T22330] head:00000000123017dd order:3 compound_mapcount:0 compound_pincount:0 [ 318.774224][T22330] flags: 0x57ff00000010200(slab|head) [ 318.779629][T22330] raw: 057ff00000010200 ffffea000516a608 ffff888140000888 ffff888010841dc0 [ 318.788238][T22330] raw: ffff8881411a1800 0000000000100003 00000001ffffffff 0000000000000000 [ 318.796827][T22330] page dumped because: kasan: bad access detected [ 318.803243][T22330] [ 318.805571][T22330] Memory state around the buggy address: [ 318.811203][T22330] ffff8881411a0f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 318.819273][T22330] ffff8881411a0f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 318.827343][T22330] >ffff8881411a1000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 318.835406][T22330] ^ [ 318.839739][T22330] ffff8881411a1080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 318.847811][T22330] ffff8881411a1100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 318.855876][T22330] ================================================================== [ 318.863937][T22330] Disabling lock debugging due to kernel taint [ 318.908112][T22330] Kernel panic - not syncing: panic_on_warn set ... [ 318.914734][T22330] CPU: 1 PID: 22330 Comm: iou-sqp-22323 Tainted: G B 5.12.0-rc1-next-20210304-syzkaller #0 [ 318.926038][T22330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.936097][T22330] Call Trace: [ 318.939379][T22330] dump_stack+0xfa/0x151 [ 318.943635][T22330] panic+0x306/0x73d [ 318.947576][T22330] ? __warn_printk+0xf3/0xf3 [ 318.952173][T22330] ? preempt_schedule_common+0x59/0xc0 [ 318.957730][T22330] ? __mutex_unlock_slowpath+0x8e/0x610 [ 318.963292][T22330] ? preempt_schedule_thunk+0x16/0x18 [ 318.968678][T22330] ? trace_hardirqs_on+0x38/0x1c0 [ 318.973790][T22330] ? trace_hardirqs_on+0x51/0x1c0 [ 318.978824][T22330] ? __mutex_unlock_slowpath+0x8e/0x610 [ 318.984381][T22330] ? __mutex_unlock_slowpath+0x8e/0x610 [ 318.989941][T22330] end_report.cold+0x5a/0x5a [ 318.994544][T22330] kasan_report.cold+0x6a/0xd8 [ 318.999321][T22330] ? __mutex_unlock_slowpath+0x8e/0x610 [ 319.004882][T22330] kasan_check_range+0x13d/0x180 [ 319.009829][T22330] __mutex_unlock_slowpath+0x8e/0x610 [ 319.015227][T22330] ? preempt_schedule_common+0x59/0xc0 [ 319.020698][T22330] ? wait_for_completion_io+0x270/0x270 [ 319.026256][T22330] io_sq_thread+0x1292/0x1a50 [ 319.030954][T22330] ? io_submit_sqes+0x6320/0x6320 [ 319.035985][T22330] ? lock_release+0x3bb/0x710 [ 319.040668][T22330] ? ret_from_fork+0x8/0x30 [ 319.045187][T22330] ? finish_wait+0x260/0x260 [ 319.049788][T22330] ? rwlock_bug.part.0+0x90/0x90 [ 319.054733][T22330] ? _raw_spin_unlock_irq+0x1f/0x40 [ 319.060012][T22330] ? io_submit_sqes+0x6320/0x6320 [ 319.065034][T22330] ret_from_fork+0x1f/0x30 [ 319.070114][T22330] Kernel Offset: disabled [ 319.074433][T22330] Rebooting in 86400 seconds..