Warning: Permanently added '[localhost]:39323' (ECDSA) to the list of known hosts. 2022/10/03 09:50:15 fuzzer started 2022/10/03 09:50:16 dialing manager at localhost:35095 syzkaller login: [ 44.705722] cgroup: Unknown subsys name 'net' [ 44.847806] cgroup: Unknown subsys name 'rlimit' 2022/10/03 09:50:30 syscalls: 212 2022/10/03 09:50:30 code coverage: enabled 2022/10/03 09:50:30 comparison tracing: enabled 2022/10/03 09:50:30 extra coverage: enabled 2022/10/03 09:50:30 setuid sandbox: enabled 2022/10/03 09:50:30 namespace sandbox: enabled 2022/10/03 09:50:30 Android sandbox: enabled 2022/10/03 09:50:30 fault injection: enabled 2022/10/03 09:50:30 leak checking: enabled 2022/10/03 09:50:30 net packet injection: enabled 2022/10/03 09:50:30 net device setup: enabled 2022/10/03 09:50:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 09:50:30 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 09:50:30 USB emulation: enabled 2022/10/03 09:50:30 hci packet injection: enabled 2022/10/03 09:50:30 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 09:50:30 802.15.4 emulation: enabled 2022/10/03 09:50:30 fetching corpus: 0, signal 0/0 (executing program) 2022/10/03 09:50:32 starting 8 fuzzer processes 09:50:32 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffffaec9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffc}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008081}, 0x850) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2000, @fd_index=0x7, 0x7, 0x0, 0x0, 0x13, 0x1}, 0x1f) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x8, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000081) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r0, 0x618, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xbb}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x44805) socketpair(0x9, 0xa, 0x4, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000580), 0x38101, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000600)={0x0, @l2={0x1f, 0x7, @none, 0x1}, @sco, @nfc={0x27, 0x1, 0x1, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x8, &(0x7f00000005c0)='batadv_slave_1\x00', 0x4, 0x1, 0x1}) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000680)=0x4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000780)={0x0, @xdp={0x2c, 0x2, r4, 0x15}, @nfc={0x27, 0x0, 0x2, 0x4}, @generic={0x27, "139768f20e479c41d7735d4778c2"}, 0x0, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000740)='veth1_virt_wifi\x00', 0x2, 0x9}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40202400}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r6, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004045}, 0x4000001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x91) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r5, 0xc0a85322, &(0x7f0000000a00)) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x10, r1, 0x0) syz_io_uring_setup(0xbc9, &(0x7f0000000ac0)={0x0, 0x4e8c, 0x0, 0x3, 0x79, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000bc0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x12344, 0x0, 0x0, 0x1}, 0xd0) 09:50:32 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x200c02) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000000c0)={0x4b, 0x3, 0x3, 0x3f, 0x3ff, 0x7}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x118, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x1, 0x1}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}, 0x9a2107d1b8f12f66}, @acquire={0x40046305, 0x2}, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x1}, @exit_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x1, 0x25}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x1a}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0xa, 0x1, 0x26}, @fda={0x66646185, 0x0, 0x2, 0x3a}, @fda={0x66646185, 0x9, 0x2, 0x3}}, &(0x7f0000000380)={0x0, 0x20, 0x40}}}], 0x8e, 0x0, &(0x7f0000000500)="366d5ba622a950b3093e1fd8b70a4d04d112e9922db264acd81bb60e00e0b2846da4f210319184530a6311a08e343ddd264102082465abfe7156c437cb74a685718e86471f844bd1439e6d5850c9aee353b72082924356df90cd599721fded925ae330a90e9a259bdd807b58e1e44bc19b17e7d638dab5a72e7630d803d02b02fba7f8c1464ce334db3b52d80911"}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000640)={0x2, &(0x7f0000000600)=[{0x1, 0x8}, {0x3, 0xe20f}]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000680)={0x0, 0x1, 'client0\x00', 0x1, "6bbcb9c6ef0c7260", "cd64059ba819bde07f4b27db657b8acf6e34c0e46ebb63939834fa89e813ecba", 0x20, 0x401}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000740)={{0x40, 0x7}, 'port1\x00', 0x80, 0x0, 0x2, 0xd5, 0xbe5, 0x80000000, 0xffff, 0x0, 0x4, 0x20}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000800), 0x101000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000840)={{0x81, 0xff}, 'port0\x00', 0x5, 0x80000, 0xff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000900)={0x227, 0x2, 0x1, 'queue0\x00', 0x2}) r4 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb71) ioctl$KIOCSOUND(r4, 0x4b2f, 0x400) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000009c0)={0x20, 0x2, 0xb24f, 0x800, 0xf, "4bf3baacd84849cf"}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a00), 0x300, 0x0) ioctl$TIOCEXCL(r5, 0x540c) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000a40)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000b80)={0x14, 0x0, &(0x7f0000000a80)=[@increfs_done={0x40106308, 0x3}], 0xc0, 0x0, &(0x7f0000000ac0)="6fbcfb4643dcce3107f09c361b0ebac8c9af92f3931ecfff349af5de15a05cdcc1d230643b4593d6ed6b1c8a2ffdc81a7b813ebeab6973f16ad76df3c9308098e48ccb9553ad065e072daaa9d31cff98e9d79794df557cd117181bac211c402edbb62e1cadff5119d011937ce5d9daaf84a81cdc5698522796c1021f1f7191e1a59c0f034571656d70e83f482b8c7a6e61d63955c0ca89ef6fbbed12f4bc77171c860a52c3e8f4c1792ade18e60b7c78ab2410d0c7f488941042963cf0bd8876"}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000bc0)={{0x5}, 'port1\x00', 0x11, 0x40010, 0x40, 0x2, 0xffffffff, 0x25c, 0x3f, 0x0, 0x1, 0x4f}) 09:50:32 executing program 1: ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) r0 = memfd_secret(0x80000) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000000c0)={0x7b, 0xfffffffffffffaa1, 0x1, 0x5, 0x80000000, 0x1ff}) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000500)={0x0, 0x1, 0x15, 0x1, 0xce, &(0x7f0000000100)="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"}) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000540)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000580)) r3 = syz_open_pts(r0, 0x44) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f00000005c0)) r4 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000600)={0x5, "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"}) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) ioctl$TIOCGPTPEER(r5, 0x5441, 0x4) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000880)={0x3, &(0x7f0000000840)=[{0x3, 0x8}, {0x6, 0x8}, {0x9, 0x80}]}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f00000008c0)) 09:50:32 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x214400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5a0c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c081}, 0x20040841) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x438, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200cc080}, 0x2000c010) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xd3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x480}, 0x20000000) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x84080000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x27}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x44) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, r2, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffec}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x82}, 0x5) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x949}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000900), 0x80c00, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff7f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10001}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x64, r5, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:ssh_keygen_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x200400c1) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0), 0x80000, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r0) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r7, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40005}, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) [ 60.146649] audit: type=1400 audit(1664790632.366:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:50:32 executing program 6: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x802, 0x0) r1 = getpgid(0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000040)={r1, 0x1, 0x80000001}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000006}, 0xc815) getpgid(r1) r3 = gettid() perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x6, 0x1, 0x0, 0x9, 0x0, 0x9, 0x1008, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x1, 0x5, 0x24, 0x1, 0x6, 0x1, 0x2, 0x0, 0x3, 0x0, 0x3}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000240)={{0x6, 0x7f}, 'port0\x00', 0x71, 0x100000, 0x2, 0x800, 0x3, 0x1000, 0x7, 0x0, 0x0, 0xd3}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r2) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r5, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x3}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4000, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f00000004c0)={0x4b, 0x5, 0x7}) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x281, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r6) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r8, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40804) r9 = getpgid(0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000680)={r9}) 09:50:32 executing program 5: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x41}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000002c0)={0x20, 0x6, 0x7, 0xa12, 0x712a, 0x9}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000020) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan0\x00'}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x4004000) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000ac0)={0x2, 0x0, 0x9, 0x15, 0x7e, &(0x7f00000006c0)="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"}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000b00)={{0x80, 0x1f}, 'port1\x00', 0x0, 0x100000, 0x8, 0x9, 0xde1, 0x1, 0x5, 0x0, 0x3, 0x5}) r4 = memfd_secret(0x0) ioctl$KDENABIO(r4, 0x4b36) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0), 0x600100, 0x0) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff0523}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000d80)={0x2}) 09:50:32 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x428801, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$VT_RELDISP(r1, 0x5605) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000140)={0x80, 0x9, 0x8, 0x5, 0x8, "75e98dba33817ed46cc9df31139de19af1ccd6"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"a8eb39dc64730839d1bd77353dac352e", 0x0, 0x0, {0xffffffff, 0x4}, {0x4, 0x1}, 0x0, [0x1, 0x6, 0x1ff, 0x4, 0x200000000000000, 0x3, 0x0, 0xb2f, 0xffffffff, 0x4, 0x6, 0xfffffffffffffffd, 0xff, 0x1f, 0xf4, 0x2]}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$VT_RELDISP(r2, 0x5605) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x8, 0x9}, 'port1\x00', 0x60, 0x80820, 0x9, 0x5, 0x0, 0x0, 0x7, 0x0, 0x4, 0x8}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r5, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x8840) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000600)) r6 = memfd_secret(0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f0000000640)={0x1, 0x3f, 0x3f}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000005) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$TCSETAF(r6, 0x5408, &(0x7f0000000780)={0x800, 0xffe1, 0x2f, 0xfff, 0x7, "43a8774ba39ebb44"}) 09:50:32 executing program 7: mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) shmget(0x1, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) r0 = syz_io_uring_setup(0x523, &(0x7f0000000000)={0x0, 0x591d, 0x8, 0x1, 0x1bf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x100030, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80}]}, 0x24}}, 0x20000001) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KDDELIO(r3, 0x4b35, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) r4 = syz_open_pts(r3, 0x440) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f00000002c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000815}, 0x4008000) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x301602, 0x0) syz_io_uring_setup(0x3dab, &(0x7f0000000440)={0x0, 0xa3d0, 0x10, 0x1, 0x3c6, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x100010, r3, 0xbee2e000) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x11, r7, 0x0) [ 61.480627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.482814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.487529] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.488934] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.491490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.493187] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.497764] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.500775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.501779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.505425] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.511532] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.513188] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.517388] Bluetooth: hci1: HCI_REQ-0x0c1a [ 61.525214] Bluetooth: hci0: HCI_REQ-0x0c1a [ 61.537188] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.539003] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.545363] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.554029] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.556370] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.557679] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.584032] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 61.586761] Bluetooth: hci2: HCI_REQ-0x0c1a [ 61.593390] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 61.596075] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 61.599701] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 61.602529] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 61.604047] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 61.609325] Bluetooth: hci7: HCI_REQ-0x0c1a [ 61.610885] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.624901] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 61.627367] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 61.631997] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.638467] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 61.639614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.641547] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 61.643645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 61.644866] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 61.648079] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 61.649812] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 61.651334] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 61.652569] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.657439] Bluetooth: hci6: HCI_REQ-0x0c1a [ 61.657855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.667296] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.668555] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 61.692138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.699324] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 61.700529] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.702618] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.703804] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 61.706067] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.711380] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.726910] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.734710] Bluetooth: hci4: HCI_REQ-0x0c1a [ 61.737278] Bluetooth: hci5: HCI_REQ-0x0c1a [ 61.752256] Bluetooth: hci3: HCI_REQ-0x0c1a [ 63.542726] Bluetooth: hci0: command 0x0409 tx timeout [ 63.542745] Bluetooth: hci1: command 0x0409 tx timeout [ 63.606202] Bluetooth: hci2: command 0x0409 tx timeout [ 63.670212] Bluetooth: hci6: command 0x0409 tx timeout [ 63.670780] Bluetooth: hci7: command 0x0409 tx timeout [ 63.798190] Bluetooth: hci5: command 0x0409 tx timeout [ 63.799303] Bluetooth: hci4: command 0x0409 tx timeout [ 63.862227] Bluetooth: hci3: command 0x0409 tx timeout [ 65.590934] Bluetooth: hci0: command 0x041b tx timeout [ 65.591823] Bluetooth: hci1: command 0x041b tx timeout [ 65.654208] Bluetooth: hci2: command 0x041b tx timeout [ 65.718207] Bluetooth: hci7: command 0x041b tx timeout [ 65.718957] Bluetooth: hci6: command 0x041b tx timeout [ 65.846291] Bluetooth: hci4: command 0x041b tx timeout [ 65.847088] Bluetooth: hci5: command 0x041b tx timeout [ 65.910233] Bluetooth: hci3: command 0x041b tx timeout [ 67.638283] Bluetooth: hci1: command 0x040f tx timeout [ 67.638783] Bluetooth: hci0: command 0x040f tx timeout [ 67.702243] Bluetooth: hci2: command 0x040f tx timeout [ 67.767172] Bluetooth: hci6: command 0x040f tx timeout [ 67.767625] Bluetooth: hci7: command 0x040f tx timeout [ 67.894205] Bluetooth: hci5: command 0x040f tx timeout [ 67.894660] Bluetooth: hci4: command 0x040f tx timeout [ 67.958164] Bluetooth: hci3: command 0x040f tx timeout [ 69.686186] Bluetooth: hci0: command 0x0419 tx timeout [ 69.686790] Bluetooth: hci1: command 0x0419 tx timeout [ 69.751248] Bluetooth: hci2: command 0x0419 tx timeout [ 69.814186] Bluetooth: hci7: command 0x0419 tx timeout [ 69.814742] Bluetooth: hci6: command 0x0419 tx timeout [ 69.942301] Bluetooth: hci4: command 0x0419 tx timeout [ 69.942827] Bluetooth: hci5: command 0x0419 tx timeout [ 70.006166] Bluetooth: hci3: command 0x0419 tx timeout 09:51:27 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x200c02) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000000c0)={0x4b, 0x3, 0x3, 0x3f, 0x3ff, 0x7}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x118, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x1, 0x1}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}, 0x9a2107d1b8f12f66}, @acquire={0x40046305, 0x2}, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x1}, @exit_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x1, 0x25}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x1a}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0xa, 0x1, 0x26}, @fda={0x66646185, 0x0, 0x2, 0x3a}, @fda={0x66646185, 0x9, 0x2, 0x3}}, &(0x7f0000000380)={0x0, 0x20, 0x40}}}], 0x8e, 0x0, &(0x7f0000000500)="366d5ba622a950b3093e1fd8b70a4d04d112e9922db264acd81bb60e00e0b2846da4f210319184530a6311a08e343ddd264102082465abfe7156c437cb74a685718e86471f844bd1439e6d5850c9aee353b72082924356df90cd599721fded925ae330a90e9a259bdd807b58e1e44bc19b17e7d638dab5a72e7630d803d02b02fba7f8c1464ce334db3b52d80911"}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000640)={0x2, &(0x7f0000000600)=[{0x1, 0x8}, {0x3, 0xe20f}]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000680)={0x0, 0x1, 'client0\x00', 0x1, "6bbcb9c6ef0c7260", "cd64059ba819bde07f4b27db657b8acf6e34c0e46ebb63939834fa89e813ecba", 0x20, 0x401}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000740)={{0x40, 0x7}, 'port1\x00', 0x80, 0x0, 0x2, 0xd5, 0xbe5, 0x80000000, 0xffff, 0x0, 0x4, 0x20}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000800), 0x101000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000840)={{0x81, 0xff}, 'port0\x00', 0x5, 0x80000, 0xff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000900)={0x227, 0x2, 0x1, 'queue0\x00', 0x2}) r4 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb71) ioctl$KIOCSOUND(r4, 0x4b2f, 0x400) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000009c0)={0x20, 0x2, 0xb24f, 0x800, 0xf, "4bf3baacd84849cf"}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a00), 0x300, 0x0) ioctl$TIOCEXCL(r5, 0x540c) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000a40)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000b80)={0x14, 0x0, &(0x7f0000000a80)=[@increfs_done={0x40106308, 0x3}], 0xc0, 0x0, &(0x7f0000000ac0)="6fbcfb4643dcce3107f09c361b0ebac8c9af92f3931ecfff349af5de15a05cdcc1d230643b4593d6ed6b1c8a2ffdc81a7b813ebeab6973f16ad76df3c9308098e48ccb9553ad065e072daaa9d31cff98e9d79794df557cd117181bac211c402edbb62e1cadff5119d011937ce5d9daaf84a81cdc5698522796c1021f1f7191e1a59c0f034571656d70e83f482b8c7a6e61d63955c0ca89ef6fbbed12f4bc77171c860a52c3e8f4c1792ade18e60b7c78ab2410d0c7f488941042963cf0bd8876"}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000bc0)={{0x5}, 'port1\x00', 0x11, 0x40010, 0x40, 0x2, 0xffffffff, 0x25c, 0x3f, 0x0, 0x1, 0x4f}) 09:51:27 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x200c02) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000000c0)={0x4b, 0x3, 0x3, 0x3f, 0x3ff, 0x7}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x118, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x1, 0x1}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}, 0x9a2107d1b8f12f66}, @acquire={0x40046305, 0x2}, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x1}, @exit_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x1, 0x25}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x1a}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0xa, 0x1, 0x26}, @fda={0x66646185, 0x0, 0x2, 0x3a}, @fda={0x66646185, 0x9, 0x2, 0x3}}, &(0x7f0000000380)={0x0, 0x20, 0x40}}}], 0x8e, 0x0, &(0x7f0000000500)="366d5ba622a950b3093e1fd8b70a4d04d112e9922db264acd81bb60e00e0b2846da4f210319184530a6311a08e343ddd264102082465abfe7156c437cb74a685718e86471f844bd1439e6d5850c9aee353b72082924356df90cd599721fded925ae330a90e9a259bdd807b58e1e44bc19b17e7d638dab5a72e7630d803d02b02fba7f8c1464ce334db3b52d80911"}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000640)={0x2, &(0x7f0000000600)=[{0x1, 0x8}, {0x3, 0xe20f}]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000680)={0x0, 0x1, 'client0\x00', 0x1, "6bbcb9c6ef0c7260", "cd64059ba819bde07f4b27db657b8acf6e34c0e46ebb63939834fa89e813ecba", 0x20, 0x401}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000740)={{0x40, 0x7}, 'port1\x00', 0x80, 0x0, 0x2, 0xd5, 0xbe5, 0x80000000, 0xffff, 0x0, 0x4, 0x20}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000800), 0x101000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000840)={{0x81, 0xff}, 'port0\x00', 0x5, 0x80000, 0xff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000900)={0x227, 0x2, 0x1, 'queue0\x00', 0x2}) r4 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb71) ioctl$KIOCSOUND(r4, 0x4b2f, 0x400) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000009c0)={0x20, 0x2, 0xb24f, 0x800, 0xf, "4bf3baacd84849cf"}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a00), 0x300, 0x0) ioctl$TIOCEXCL(r5, 0x540c) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000a40)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000b80)={0x14, 0x0, &(0x7f0000000a80)=[@increfs_done={0x40106308, 0x3}], 0xc0, 0x0, &(0x7f0000000ac0)="6fbcfb4643dcce3107f09c361b0ebac8c9af92f3931ecfff349af5de15a05cdcc1d230643b4593d6ed6b1c8a2ffdc81a7b813ebeab6973f16ad76df3c9308098e48ccb9553ad065e072daaa9d31cff98e9d79794df557cd117181bac211c402edbb62e1cadff5119d011937ce5d9daaf84a81cdc5698522796c1021f1f7191e1a59c0f034571656d70e83f482b8c7a6e61d63955c0ca89ef6fbbed12f4bc77171c860a52c3e8f4c1792ade18e60b7c78ab2410d0c7f488941042963cf0bd8876"}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000bc0)={{0x5}, 'port1\x00', 0x11, 0x40010, 0x40, 0x2, 0xffffffff, 0x25c, 0x3f, 0x0, 0x1, 0x4f}) [ 115.042775] audit: type=1400 audit(1664790687.263:7): avc: denied { open } for pid=3921 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 09:51:27 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x200c02) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000000c0)={0x4b, 0x3, 0x3, 0x3f, 0x3ff, 0x7}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x118, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x1, 0x1}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}, 0x9a2107d1b8f12f66}, @acquire={0x40046305, 0x2}, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x1}, @exit_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x1, 0x25}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x1a}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0xa, 0x1, 0x26}, @fda={0x66646185, 0x0, 0x2, 0x3a}, @fda={0x66646185, 0x9, 0x2, 0x3}}, &(0x7f0000000380)={0x0, 0x20, 0x40}}}], 0x8e, 0x0, &(0x7f0000000500)="366d5ba622a950b3093e1fd8b70a4d04d112e9922db264acd81bb60e00e0b2846da4f210319184530a6311a08e343ddd264102082465abfe7156c437cb74a685718e86471f844bd1439e6d5850c9aee353b72082924356df90cd599721fded925ae330a90e9a259bdd807b58e1e44bc19b17e7d638dab5a72e7630d803d02b02fba7f8c1464ce334db3b52d80911"}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000640)={0x2, &(0x7f0000000600)=[{0x1, 0x8}, {0x3, 0xe20f}]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000680)={0x0, 0x1, 'client0\x00', 0x1, "6bbcb9c6ef0c7260", "cd64059ba819bde07f4b27db657b8acf6e34c0e46ebb63939834fa89e813ecba", 0x20, 0x401}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000740)={{0x40, 0x7}, 'port1\x00', 0x80, 0x0, 0x2, 0xd5, 0xbe5, 0x80000000, 0xffff, 0x0, 0x4, 0x20}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000800), 0x101000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000840)={{0x81, 0xff}, 'port0\x00', 0x5, 0x80000, 0xff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000900)={0x227, 0x2, 0x1, 'queue0\x00', 0x2}) r4 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb71) ioctl$KIOCSOUND(r4, 0x4b2f, 0x400) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000009c0)={0x20, 0x2, 0xb24f, 0x800, 0xf, "4bf3baacd84849cf"}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a00), 0x300, 0x0) ioctl$TIOCEXCL(r5, 0x540c) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000a40)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000b80)={0x14, 0x0, &(0x7f0000000a80)=[@increfs_done={0x40106308, 0x3}], 0xc0, 0x0, &(0x7f0000000ac0)="6fbcfb4643dcce3107f09c361b0ebac8c9af92f3931ecfff349af5de15a05cdcc1d230643b4593d6ed6b1c8a2ffdc81a7b813ebeab6973f16ad76df3c9308098e48ccb9553ad065e072daaa9d31cff98e9d79794df557cd117181bac211c402edbb62e1cadff5119d011937ce5d9daaf84a81cdc5698522796c1021f1f7191e1a59c0f034571656d70e83f482b8c7a6e61d63955c0ca89ef6fbbed12f4bc77171c860a52c3e8f4c1792ade18e60b7c78ab2410d0c7f488941042963cf0bd8876"}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000bc0)={{0x5}, 'port1\x00', 0x11, 0x40010, 0x40, 0x2, 0xffffffff, 0x25c, 0x3f, 0x0, 0x1, 0x4f}) 09:51:27 executing program 1: ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) r0 = memfd_secret(0x80000) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000000c0)={0x7b, 0xfffffffffffffaa1, 0x1, 0x5, 0x80000000, 0x1ff}) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000500)={0x0, 0x1, 0x15, 0x1, 0xce, &(0x7f0000000100)="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"}) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000540)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000580)) r3 = syz_open_pts(r0, 0x44) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f00000005c0)) r4 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000600)={0x5, "6110dd2717d938092f4f1421877ade57377a10ec0af3e64b6f3273419c11603e6133f0143e402434e2ccddd081a3c9146ce8529ede97195cc7d26e0cbc7a4c26cb7581e6b9e8519046020dd5f5b45bc5980c4d60c1cb6391d2fd0727f3f6ec7085e7bf4bc903038601561c90de3802d8973d3a7db169db9ad7b78271f9f85fbb21e461514e990d1c8f9419bfd775510c0883f881d8f9becfef56254c34250813188c3276d58ca7ccf4f1419f504232535ad1b3f93a01df64e034b6ab6ddd2b018d5d2b2297759044bcaf2d88e7dc251b32aadc7321bb75b5913e31f22be345147f9db24b0319b835654c37cf84107644a0ea84aa0e34db1f1a8bfd809524e81788751db2e6f786c235917adb32f7f8455de544dd690192f162632d5f44d26661dc316d22b98db27e2e1f23766e6c0e22e1c74de86ce862c9c41d4243aaeb41d890aa295c4d802da443d2a7385f887028aa9b59cefd1b51c17ea6c589ef1a61a5fb3b1d92bc81a95ff328295a5fe7086876b48e559119886c0a66b024ab9c74c05b5ec9c3075db0fb3f50532733599f8809e8026b8df690c1022522db2d9807805389d46d1378eaaa07a842dc1fd22d104044c12113e69cb1ef95476d92bf7a707dd677002c961989d221171f2728376373ae4db61a6bfeb830e9efea5b1562e05cacbcc0d30f4eda60aad608ff5a4f7beafc300b7e69157780e7a999fa9ce4eb"}) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) ioctl$TIOCGPTPEER(r5, 0x5441, 0x4) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000880)={0x3, &(0x7f0000000840)=[{0x3, 0x8}, {0x6, 0x8}, {0x9, 0x80}]}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f00000008c0)) 09:51:27 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x428801, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$VT_RELDISP(r1, 0x5605) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000140)={0x80, 0x9, 0x8, 0x5, 0x8, "75e98dba33817ed46cc9df31139de19af1ccd6"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"a8eb39dc64730839d1bd77353dac352e", 0x0, 0x0, {0xffffffff, 0x4}, {0x4, 0x1}, 0x0, [0x1, 0x6, 0x1ff, 0x4, 0x200000000000000, 0x3, 0x0, 0xb2f, 0xffffffff, 0x4, 0x6, 0xfffffffffffffffd, 0xff, 0x1f, 0xf4, 0x2]}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$VT_RELDISP(r2, 0x5605) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x8, 0x9}, 'port1\x00', 0x60, 0x80820, 0x9, 0x5, 0x0, 0x0, 0x7, 0x0, 0x4, 0x8}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r5, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x8840) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000600)) r6 = memfd_secret(0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f0000000640)={0x1, 0x3f, 0x3f}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000005) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$TCSETAF(r6, 0x5408, &(0x7f0000000780)={0x800, 0xffe1, 0x2f, 0xfff, 0x7, "43a8774ba39ebb44"}) 09:51:27 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x200c02) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000000c0)={0x4b, 0x3, 0x3, 0x3f, 0x3ff, 0x7}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x118, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x1, 0x1}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}, 0x9a2107d1b8f12f66}, @acquire={0x40046305, 0x2}, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x1}, @exit_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x1, 0x25}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x1a}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0xa, 0x1, 0x26}, @fda={0x66646185, 0x0, 0x2, 0x3a}, @fda={0x66646185, 0x9, 0x2, 0x3}}, &(0x7f0000000380)={0x0, 0x20, 0x40}}}], 0x8e, 0x0, &(0x7f0000000500)="366d5ba622a950b3093e1fd8b70a4d04d112e9922db264acd81bb60e00e0b2846da4f210319184530a6311a08e343ddd264102082465abfe7156c437cb74a685718e86471f844bd1439e6d5850c9aee353b72082924356df90cd599721fded925ae330a90e9a259bdd807b58e1e44bc19b17e7d638dab5a72e7630d803d02b02fba7f8c1464ce334db3b52d80911"}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000640)={0x2, &(0x7f0000000600)=[{0x1, 0x8}, {0x3, 0xe20f}]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000680)={0x0, 0x1, 'client0\x00', 0x1, "6bbcb9c6ef0c7260", "cd64059ba819bde07f4b27db657b8acf6e34c0e46ebb63939834fa89e813ecba", 0x20, 0x401}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000740)={{0x40, 0x7}, 'port1\x00', 0x80, 0x0, 0x2, 0xd5, 0xbe5, 0x80000000, 0xffff, 0x0, 0x4, 0x20}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000800), 0x101000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000840)={{0x81, 0xff}, 'port0\x00', 0x5, 0x80000, 0xff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000900)={0x227, 0x2, 0x1, 'queue0\x00', 0x2}) r4 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb71) ioctl$KIOCSOUND(r4, 0x4b2f, 0x400) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000009c0)={0x20, 0x2, 0xb24f, 0x800, 0xf, "4bf3baacd84849cf"}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a00), 0x300, 0x0) ioctl$TIOCEXCL(r5, 0x540c) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000a40)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000b80)={0x14, 0x0, &(0x7f0000000a80)=[@increfs_done={0x40106308, 0x3}], 0xc0, 0x0, &(0x7f0000000ac0)="6fbcfb4643dcce3107f09c361b0ebac8c9af92f3931ecfff349af5de15a05cdcc1d230643b4593d6ed6b1c8a2ffdc81a7b813ebeab6973f16ad76df3c9308098e48ccb9553ad065e072daaa9d31cff98e9d79794df557cd117181bac211c402edbb62e1cadff5119d011937ce5d9daaf84a81cdc5698522796c1021f1f7191e1a59c0f034571656d70e83f482b8c7a6e61d63955c0ca89ef6fbbed12f4bc77171c860a52c3e8f4c1792ade18e60b7c78ab2410d0c7f488941042963cf0bd8876"}) 09:51:27 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x428801, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$VT_RELDISP(r1, 0x5605) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000140)={0x80, 0x9, 0x8, 0x5, 0x8, "75e98dba33817ed46cc9df31139de19af1ccd6"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"a8eb39dc64730839d1bd77353dac352e", 0x0, 0x0, {0xffffffff, 0x4}, {0x4, 0x1}, 0x0, [0x1, 0x6, 0x1ff, 0x4, 0x200000000000000, 0x3, 0x0, 0xb2f, 0xffffffff, 0x4, 0x6, 0xfffffffffffffffd, 0xff, 0x1f, 0xf4, 0x2]}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$VT_RELDISP(r2, 0x5605) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x8, 0x9}, 'port1\x00', 0x60, 0x80820, 0x9, 0x5, 0x0, 0x0, 0x7, 0x0, 0x4, 0x8}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r5, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x8840) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000600)) r6 = memfd_secret(0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f0000000640)={0x1, 0x3f, 0x3f}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000005) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$TCSETAF(r6, 0x5408, &(0x7f0000000780)={0x800, 0xffe1, 0x2f, 0xfff, 0x7, "43a8774ba39ebb44"}) 09:51:27 executing program 1: ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) r0 = memfd_secret(0x80000) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000000c0)={0x7b, 0xfffffffffffffaa1, 0x1, 0x5, 0x80000000, 0x1ff}) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000500)={0x0, 0x1, 0x15, 0x1, 0xce, &(0x7f0000000100)="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"}) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000540)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000580)) r3 = syz_open_pts(r0, 0x44) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f00000005c0)) r4 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000600)={0x5, "6110dd2717d938092f4f1421877ade57377a10ec0af3e64b6f3273419c11603e6133f0143e402434e2ccddd081a3c9146ce8529ede97195cc7d26e0cbc7a4c26cb7581e6b9e8519046020dd5f5b45bc5980c4d60c1cb6391d2fd0727f3f6ec7085e7bf4bc903038601561c90de3802d8973d3a7db169db9ad7b78271f9f85fbb21e461514e990d1c8f9419bfd775510c0883f881d8f9becfef56254c34250813188c3276d58ca7ccf4f1419f504232535ad1b3f93a01df64e034b6ab6ddd2b018d5d2b2297759044bcaf2d88e7dc251b32aadc7321bb75b5913e31f22be345147f9db24b0319b835654c37cf84107644a0ea84aa0e34db1f1a8bfd809524e81788751db2e6f786c235917adb32f7f8455de544dd690192f162632d5f44d26661dc316d22b98db27e2e1f23766e6c0e22e1c74de86ce862c9c41d4243aaeb41d890aa295c4d802da443d2a7385f887028aa9b59cefd1b51c17ea6c589ef1a61a5fb3b1d92bc81a95ff328295a5fe7086876b48e559119886c0a66b024ab9c74c05b5ec9c3075db0fb3f50532733599f8809e8026b8df690c1022522db2d9807805389d46d1378eaaa07a842dc1fd22d104044c12113e69cb1ef95476d92bf7a707dd677002c961989d221171f2728376373ae4db61a6bfeb830e9efea5b1562e05cacbcc0d30f4eda60aad608ff5a4f7beafc300b7e69157780e7a999fa9ce4eb"}) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) ioctl$TIOCGPTPEER(r5, 0x5441, 0x4) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000880)={0x3, &(0x7f0000000840)=[{0x3, 0x8}, {0x6, 0x8}, {0x9, 0x80}]}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f00000008c0)) 09:51:43 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x428801, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$VT_RELDISP(r1, 0x5605) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000140)={0x80, 0x9, 0x8, 0x5, 0x8, "75e98dba33817ed46cc9df31139de19af1ccd6"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"a8eb39dc64730839d1bd77353dac352e", 0x0, 0x0, {0xffffffff, 0x4}, {0x4, 0x1}, 0x0, [0x1, 0x6, 0x1ff, 0x4, 0x200000000000000, 0x3, 0x0, 0xb2f, 0xffffffff, 0x4, 0x6, 0xfffffffffffffffd, 0xff, 0x1f, 0xf4, 0x2]}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$VT_RELDISP(r2, 0x5605) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x8, 0x9}, 'port1\x00', 0x60, 0x80820, 0x9, 0x5, 0x0, 0x0, 0x7, 0x0, 0x4, 0x8}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r5, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x8840) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000600)) r6 = memfd_secret(0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f0000000640)={0x1, 0x3f, 0x3f}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000005) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$TCSETAF(r6, 0x5408, &(0x7f0000000780)={0x800, 0xffe1, 0x2f, 0xfff, 0x7, "43a8774ba39ebb44"}) 09:51:43 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x200c02) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000000c0)={0x4b, 0x3, 0x3, 0x3f, 0x3ff, 0x7}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x118, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x1, 0x1}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}, 0x9a2107d1b8f12f66}, @acquire={0x40046305, 0x2}, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x1}, @exit_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x1, 0x25}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x1a}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0xa, 0x1, 0x26}, @fda={0x66646185, 0x0, 0x2, 0x3a}, @fda={0x66646185, 0x9, 0x2, 0x3}}, &(0x7f0000000380)={0x0, 0x20, 0x40}}}], 0x8e, 0x0, &(0x7f0000000500)="366d5ba622a950b3093e1fd8b70a4d04d112e9922db264acd81bb60e00e0b2846da4f210319184530a6311a08e343ddd264102082465abfe7156c437cb74a685718e86471f844bd1439e6d5850c9aee353b72082924356df90cd599721fded925ae330a90e9a259bdd807b58e1e44bc19b17e7d638dab5a72e7630d803d02b02fba7f8c1464ce334db3b52d80911"}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000640)={0x2, &(0x7f0000000600)=[{0x1, 0x8}, {0x3, 0xe20f}]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000680)={0x0, 0x1, 'client0\x00', 0x1, "6bbcb9c6ef0c7260", "cd64059ba819bde07f4b27db657b8acf6e34c0e46ebb63939834fa89e813ecba", 0x20, 0x401}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000740)={{0x40, 0x7}, 'port1\x00', 0x80, 0x0, 0x2, 0xd5, 0xbe5, 0x80000000, 0xffff, 0x0, 0x4, 0x20}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000800), 0x101000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000840)={{0x81, 0xff}, 'port0\x00', 0x5, 0x80000, 0xff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000900)={0x227, 0x2, 0x1, 'queue0\x00', 0x2}) r4 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb71) ioctl$KIOCSOUND(r4, 0x4b2f, 0x400) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000009c0)={0x20, 0x2, 0xb24f, 0x800, 0xf, "4bf3baacd84849cf"}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a00), 0x300, 0x0) ioctl$TIOCEXCL(r5, 0x540c) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000a40)) 09:51:43 executing program 6: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x802, 0x0) r1 = getpgid(0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000040)={r1, 0x1, 0x80000001}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000006}, 0xc815) getpgid(r1) r3 = gettid() perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x6, 0x1, 0x0, 0x9, 0x0, 0x9, 0x1008, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x1, 0x5, 0x24, 0x1, 0x6, 0x1, 0x2, 0x0, 0x3, 0x0, 0x3}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000240)={{0x6, 0x7f}, 'port0\x00', 0x71, 0x100000, 0x2, 0x800, 0x3, 0x1000, 0x7, 0x0, 0x0, 0xd3}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r2) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r5, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x3}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4000, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f00000004c0)={0x4b, 0x5, 0x7}) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x281, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r6) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r8, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40804) r9 = getpgid(0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000680)={r9}) 09:51:43 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x214400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5a0c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c081}, 0x20040841) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x438, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200cc080}, 0x2000c010) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xd3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x480}, 0x20000000) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x84080000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x27}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x44) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, r2, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffec}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x82}, 0x5) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x949}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000900), 0x80c00, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff7f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10001}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x64, r5, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:ssh_keygen_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x200400c1) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0), 0x80000, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r0) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r7, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40005}, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) 09:51:43 executing program 7: mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) shmget(0x1, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) r0 = syz_io_uring_setup(0x523, &(0x7f0000000000)={0x0, 0x591d, 0x8, 0x1, 0x1bf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x100030, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80}]}, 0x24}}, 0x20000001) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KDDELIO(r3, 0x4b35, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) r4 = syz_open_pts(r3, 0x440) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f00000002c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000815}, 0x4008000) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x301602, 0x0) syz_io_uring_setup(0x3dab, &(0x7f0000000440)={0x0, 0xa3d0, 0x10, 0x1, 0x3c6, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x100010, r3, 0xbee2e000) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x11, r7, 0x0) 09:51:43 executing program 5: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x41}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000002c0)={0x20, 0x6, 0x7, 0xa12, 0x712a, 0x9}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000020) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan0\x00'}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x4004000) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000ac0)={0x2, 0x0, 0x9, 0x15, 0x7e, &(0x7f00000006c0)="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"}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000b00)={{0x80, 0x1f}, 'port1\x00', 0x0, 0x100000, 0x8, 0x9, 0xde1, 0x1, 0x5, 0x0, 0x3, 0x5}) r4 = memfd_secret(0x0) ioctl$KDENABIO(r4, 0x4b36) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0), 0x600100, 0x0) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff0523}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000d80)={0x2}) 09:51:43 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffffaec9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffc}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008081}, 0x850) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2000, @fd_index=0x7, 0x7, 0x0, 0x0, 0x13, 0x1}, 0x1f) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x8, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000081) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r0, 0x618, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xbb}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x44805) socketpair(0x9, 0xa, 0x4, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000580), 0x38101, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000600)={0x0, @l2={0x1f, 0x7, @none, 0x1}, @sco, @nfc={0x27, 0x1, 0x1, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x8, &(0x7f00000005c0)='batadv_slave_1\x00', 0x4, 0x1, 0x1}) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000680)=0x4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000780)={0x0, @xdp={0x2c, 0x2, r4, 0x15}, @nfc={0x27, 0x0, 0x2, 0x4}, @generic={0x27, "139768f20e479c41d7735d4778c2"}, 0x0, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000740)='veth1_virt_wifi\x00', 0x2, 0x9}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40202400}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r6, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004045}, 0x4000001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x91) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r5, 0xc0a85322, &(0x7f0000000a00)) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x10, r1, 0x0) syz_io_uring_setup(0xbc9, &(0x7f0000000ac0)={0x0, 0x4e8c, 0x0, 0x3, 0x79, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000bc0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x12344, 0x0, 0x0, 0x1}, 0xd0) 09:51:43 executing program 1: ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) r0 = memfd_secret(0x80000) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000000c0)={0x7b, 0xfffffffffffffaa1, 0x1, 0x5, 0x80000000, 0x1ff}) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000500)={0x0, 0x1, 0x15, 0x1, 0xce, &(0x7f0000000100)="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"}) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000540)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000580)) r3 = syz_open_pts(r0, 0x44) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f00000005c0)) r4 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000600)={0x5, "6110dd2717d938092f4f1421877ade57377a10ec0af3e64b6f3273419c11603e6133f0143e402434e2ccddd081a3c9146ce8529ede97195cc7d26e0cbc7a4c26cb7581e6b9e8519046020dd5f5b45bc5980c4d60c1cb6391d2fd0727f3f6ec7085e7bf4bc903038601561c90de3802d8973d3a7db169db9ad7b78271f9f85fbb21e461514e990d1c8f9419bfd775510c0883f881d8f9becfef56254c34250813188c3276d58ca7ccf4f1419f504232535ad1b3f93a01df64e034b6ab6ddd2b018d5d2b2297759044bcaf2d88e7dc251b32aadc7321bb75b5913e31f22be345147f9db24b0319b835654c37cf84107644a0ea84aa0e34db1f1a8bfd809524e81788751db2e6f786c235917adb32f7f8455de544dd690192f162632d5f44d26661dc316d22b98db27e2e1f23766e6c0e22e1c74de86ce862c9c41d4243aaeb41d890aa295c4d802da443d2a7385f887028aa9b59cefd1b51c17ea6c589ef1a61a5fb3b1d92bc81a95ff328295a5fe7086876b48e559119886c0a66b024ab9c74c05b5ec9c3075db0fb3f50532733599f8809e8026b8df690c1022522db2d9807805389d46d1378eaaa07a842dc1fd22d104044c12113e69cb1ef95476d92bf7a707dd677002c961989d221171f2728376373ae4db61a6bfeb830e9efea5b1562e05cacbcc0d30f4eda60aad608ff5a4f7beafc300b7e69157780e7a999fa9ce4eb"}) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) ioctl$TIOCGPTPEER(r5, 0x5441, 0x4) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000880)={0x3, &(0x7f0000000840)=[{0x3, 0x8}, {0x6, 0x8}, {0x9, 0x80}]}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f00000008c0)) 09:51:43 executing program 1: ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) r0 = memfd_secret(0x80000) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000000c0)={0x7b, 0xfffffffffffffaa1, 0x1, 0x5, 0x80000000, 0x1ff}) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000500)={0x0, 0x1, 0x15, 0x1, 0xce, &(0x7f0000000100)="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"}) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000540)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000580)) r3 = syz_open_pts(r0, 0x44) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f00000005c0)) r4 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000600)={0x5, "6110dd2717d938092f4f1421877ade57377a10ec0af3e64b6f3273419c11603e6133f0143e402434e2ccddd081a3c9146ce8529ede97195cc7d26e0cbc7a4c26cb7581e6b9e8519046020dd5f5b45bc5980c4d60c1cb6391d2fd0727f3f6ec7085e7bf4bc903038601561c90de3802d8973d3a7db169db9ad7b78271f9f85fbb21e461514e990d1c8f9419bfd775510c0883f881d8f9becfef56254c34250813188c3276d58ca7ccf4f1419f504232535ad1b3f93a01df64e034b6ab6ddd2b018d5d2b2297759044bcaf2d88e7dc251b32aadc7321bb75b5913e31f22be345147f9db24b0319b835654c37cf84107644a0ea84aa0e34db1f1a8bfd809524e81788751db2e6f786c235917adb32f7f8455de544dd690192f162632d5f44d26661dc316d22b98db27e2e1f23766e6c0e22e1c74de86ce862c9c41d4243aaeb41d890aa295c4d802da443d2a7385f887028aa9b59cefd1b51c17ea6c589ef1a61a5fb3b1d92bc81a95ff328295a5fe7086876b48e559119886c0a66b024ab9c74c05b5ec9c3075db0fb3f50532733599f8809e8026b8df690c1022522db2d9807805389d46d1378eaaa07a842dc1fd22d104044c12113e69cb1ef95476d92bf7a707dd677002c961989d221171f2728376373ae4db61a6bfeb830e9efea5b1562e05cacbcc0d30f4eda60aad608ff5a4f7beafc300b7e69157780e7a999fa9ce4eb"}) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) ioctl$TIOCGPTPEER(r5, 0x5441, 0x4) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000880)={0x3, &(0x7f0000000840)=[{0x3, 0x8}, {0x6, 0x8}, {0x9, 0x80}]}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) 09:51:43 executing program 1: ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) r0 = memfd_secret(0x80000) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000000c0)={0x7b, 0xfffffffffffffaa1, 0x1, 0x5, 0x80000000, 0x1ff}) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000500)={0x0, 0x1, 0x15, 0x1, 0xce, &(0x7f0000000100)="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"}) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000540)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000580)) r3 = syz_open_pts(r0, 0x44) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f00000005c0)) r4 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000600)={0x5, "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"}) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) ioctl$TIOCGPTPEER(r5, 0x5441, 0x4) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000880)={0x3, &(0x7f0000000840)=[{0x3, 0x8}, {0x6, 0x8}, {0x9, 0x80}]}) 09:51:43 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x200c02) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000000c0)={0x4b, 0x3, 0x3, 0x3f, 0x3ff, 0x7}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x118, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x1, 0x1}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}, 0x9a2107d1b8f12f66}, @acquire={0x40046305, 0x2}, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x1}, @exit_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x1, 0x25}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x1a}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0xa, 0x1, 0x26}, @fda={0x66646185, 0x0, 0x2, 0x3a}, @fda={0x66646185, 0x9, 0x2, 0x3}}, &(0x7f0000000380)={0x0, 0x20, 0x40}}}], 0x8e, 0x0, &(0x7f0000000500)="366d5ba622a950b3093e1fd8b70a4d04d112e9922db264acd81bb60e00e0b2846da4f210319184530a6311a08e343ddd264102082465abfe7156c437cb74a685718e86471f844bd1439e6d5850c9aee353b72082924356df90cd599721fded925ae330a90e9a259bdd807b58e1e44bc19b17e7d638dab5a72e7630d803d02b02fba7f8c1464ce334db3b52d80911"}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000640)={0x2, &(0x7f0000000600)=[{0x1, 0x8}, {0x3, 0xe20f}]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000680)={0x0, 0x1, 'client0\x00', 0x1, "6bbcb9c6ef0c7260", "cd64059ba819bde07f4b27db657b8acf6e34c0e46ebb63939834fa89e813ecba", 0x20, 0x401}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000740)={{0x40, 0x7}, 'port1\x00', 0x80, 0x0, 0x2, 0xd5, 0xbe5, 0x80000000, 0xffff, 0x0, 0x4, 0x20}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000800), 0x101000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000840)={{0x81, 0xff}, 'port0\x00', 0x5, 0x80000, 0xff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000900)={0x227, 0x2, 0x1, 'queue0\x00', 0x2}) r4 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb71) ioctl$KIOCSOUND(r4, 0x4b2f, 0x400) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000009c0)={0x20, 0x2, 0xb24f, 0x800, 0xf, "4bf3baacd84849cf"}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a00), 0x300, 0x0) ioctl$TIOCEXCL(r5, 0x540c) 09:51:56 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x214400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5a0c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c081}, 0x20040841) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x438, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200cc080}, 0x2000c010) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xd3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x480}, 0x20000000) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x84080000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x27}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x44) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, r2, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffec}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x82}, 0x5) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x949}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000900), 0x80c00, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff7f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10001}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x64, r5, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:ssh_keygen_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x200400c1) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0), 0x80000, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r0) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r7, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40005}, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) 09:51:56 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x200c02) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000000c0)={0x4b, 0x3, 0x3, 0x3f, 0x3ff, 0x7}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x118, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x1, 0x1}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}, 0x9a2107d1b8f12f66}, @acquire={0x40046305, 0x2}, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x1}, @exit_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x1, 0x25}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x1a}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0xa, 0x1, 0x26}, @fda={0x66646185, 0x0, 0x2, 0x3a}, @fda={0x66646185, 0x9, 0x2, 0x3}}, &(0x7f0000000380)={0x0, 0x20, 0x40}}}], 0x8e, 0x0, &(0x7f0000000500)="366d5ba622a950b3093e1fd8b70a4d04d112e9922db264acd81bb60e00e0b2846da4f210319184530a6311a08e343ddd264102082465abfe7156c437cb74a685718e86471f844bd1439e6d5850c9aee353b72082924356df90cd599721fded925ae330a90e9a259bdd807b58e1e44bc19b17e7d638dab5a72e7630d803d02b02fba7f8c1464ce334db3b52d80911"}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000640)={0x2, &(0x7f0000000600)=[{0x1, 0x8}, {0x3, 0xe20f}]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000680)={0x0, 0x1, 'client0\x00', 0x1, "6bbcb9c6ef0c7260", "cd64059ba819bde07f4b27db657b8acf6e34c0e46ebb63939834fa89e813ecba", 0x20, 0x401}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000740)={{0x40, 0x7}, 'port1\x00', 0x80, 0x0, 0x2, 0xd5, 0xbe5, 0x80000000, 0xffff, 0x0, 0x4, 0x20}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000800), 0x101000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000840)={{0x81, 0xff}, 'port0\x00', 0x5, 0x80000, 0xff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000900)={0x227, 0x2, 0x1, 'queue0\x00', 0x2}) r4 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb71) ioctl$KIOCSOUND(r4, 0x4b2f, 0x400) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000009c0)={0x20, 0x2, 0xb24f, 0x800, 0xf, "4bf3baacd84849cf"}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a00), 0x300, 0x0) 09:51:56 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x428801, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$VT_RELDISP(r1, 0x5605) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000140)={0x80, 0x9, 0x8, 0x5, 0x8, "75e98dba33817ed46cc9df31139de19af1ccd6"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"a8eb39dc64730839d1bd77353dac352e", 0x0, 0x0, {0xffffffff, 0x4}, {0x4, 0x1}, 0x0, [0x1, 0x6, 0x1ff, 0x4, 0x200000000000000, 0x3, 0x0, 0xb2f, 0xffffffff, 0x4, 0x6, 0xfffffffffffffffd, 0xff, 0x1f, 0xf4, 0x2]}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$VT_RELDISP(r2, 0x5605) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x8, 0x9}, 'port1\x00', 0x60, 0x80820, 0x9, 0x5, 0x0, 0x0, 0x7, 0x0, 0x4, 0x8}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r5, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x8840) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000600)) r6 = memfd_secret(0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f0000000640)={0x1, 0x3f, 0x3f}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000005) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 09:51:56 executing program 5: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x41}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000002c0)={0x20, 0x6, 0x7, 0xa12, 0x712a, 0x9}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000020) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan0\x00'}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x4004000) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000ac0)={0x2, 0x0, 0x9, 0x15, 0x7e, &(0x7f00000006c0)="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"}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000b00)={{0x80, 0x1f}, 'port1\x00', 0x0, 0x100000, 0x8, 0x9, 0xde1, 0x1, 0x5, 0x0, 0x3, 0x5}) r4 = memfd_secret(0x0) ioctl$KDENABIO(r4, 0x4b36) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0), 0x600100, 0x0) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff0523}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000d80)={0x2}) 09:51:56 executing program 1: ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) r0 = memfd_secret(0x80000) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000000c0)={0x7b, 0xfffffffffffffaa1, 0x1, 0x5, 0x80000000, 0x1ff}) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000500)={0x0, 0x1, 0x15, 0x1, 0xce, &(0x7f0000000100)="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"}) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000540)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000580)) r3 = syz_open_pts(r0, 0x44) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f00000005c0)) r4 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000600)={0x5, "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"}) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) ioctl$TIOCGPTPEER(r5, 0x5441, 0x4) 09:51:56 executing program 7: mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) shmget(0x1, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) r0 = syz_io_uring_setup(0x523, &(0x7f0000000000)={0x0, 0x591d, 0x8, 0x1, 0x1bf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x100030, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80}]}, 0x24}}, 0x20000001) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KDDELIO(r3, 0x4b35, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) r4 = syz_open_pts(r3, 0x440) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f00000002c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000815}, 0x4008000) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x301602, 0x0) syz_io_uring_setup(0x3dab, &(0x7f0000000440)={0x0, 0xa3d0, 0x10, 0x1, 0x3c6, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x100010, r3, 0xbee2e000) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x11, r7, 0x0) 09:51:56 executing program 6: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x802, 0x0) r1 = getpgid(0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000040)={r1, 0x1, 0x80000001}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000006}, 0xc815) getpgid(r1) r3 = gettid() perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x6, 0x1, 0x0, 0x9, 0x0, 0x9, 0x1008, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x1, 0x5, 0x24, 0x1, 0x6, 0x1, 0x2, 0x0, 0x3, 0x0, 0x3}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000240)={{0x6, 0x7f}, 'port0\x00', 0x71, 0x100000, 0x2, 0x800, 0x3, 0x1000, 0x7, 0x0, 0x0, 0xd3}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r2) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r5, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x3}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4000, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f00000004c0)={0x4b, 0x5, 0x7}) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x281, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r6) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r8, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40804) r9 = getpgid(0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000680)={r9}) 09:51:56 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffffaec9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffc}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008081}, 0x850) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2000, @fd_index=0x7, 0x7, 0x0, 0x0, 0x13, 0x1}, 0x1f) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x8, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000081) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r0, 0x618, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xbb}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x44805) socketpair(0x9, 0xa, 0x4, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000580), 0x38101, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000600)={0x0, @l2={0x1f, 0x7, @none, 0x1}, @sco, @nfc={0x27, 0x1, 0x1, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x8, &(0x7f00000005c0)='batadv_slave_1\x00', 0x4, 0x1, 0x1}) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000680)=0x4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000780)={0x0, @xdp={0x2c, 0x2, r4, 0x15}, @nfc={0x27, 0x0, 0x2, 0x4}, @generic={0x27, "139768f20e479c41d7735d4778c2"}, 0x0, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000740)='veth1_virt_wifi\x00', 0x2, 0x9}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40202400}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r6, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004045}, 0x4000001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x91) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r5, 0xc0a85322, &(0x7f0000000a00)) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x10, r1, 0x0) syz_io_uring_setup(0xbc9, &(0x7f0000000ac0)={0x0, 0x4e8c, 0x0, 0x3, 0x79, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000bc0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x12344, 0x0, 0x0, 0x1}, 0xd0) 09:51:57 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x200c02) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000000c0)={0x4b, 0x3, 0x3, 0x3f, 0x3ff, 0x7}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x118, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x1, 0x1}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}, 0x9a2107d1b8f12f66}, @acquire={0x40046305, 0x2}, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x1}, @exit_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x1, 0x25}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x1a}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0xa, 0x1, 0x26}, @fda={0x66646185, 0x0, 0x2, 0x3a}, @fda={0x66646185, 0x9, 0x2, 0x3}}, &(0x7f0000000380)={0x0, 0x20, 0x40}}}], 0x8e, 0x0, &(0x7f0000000500)="366d5ba622a950b3093e1fd8b70a4d04d112e9922db264acd81bb60e00e0b2846da4f210319184530a6311a08e343ddd264102082465abfe7156c437cb74a685718e86471f844bd1439e6d5850c9aee353b72082924356df90cd599721fded925ae330a90e9a259bdd807b58e1e44bc19b17e7d638dab5a72e7630d803d02b02fba7f8c1464ce334db3b52d80911"}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000640)={0x2, &(0x7f0000000600)=[{0x1, 0x8}, {0x3, 0xe20f}]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000680)={0x0, 0x1, 'client0\x00', 0x1, "6bbcb9c6ef0c7260", "cd64059ba819bde07f4b27db657b8acf6e34c0e46ebb63939834fa89e813ecba", 0x20, 0x401}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000740)={{0x40, 0x7}, 'port1\x00', 0x80, 0x0, 0x2, 0xd5, 0xbe5, 0x80000000, 0xffff, 0x0, 0x4, 0x20}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000800), 0x101000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000840)={{0x81, 0xff}, 'port0\x00', 0x5, 0x80000, 0xff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000900)={0x227, 0x2, 0x1, 'queue0\x00', 0x2}) r4 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb71) ioctl$KIOCSOUND(r4, 0x4b2f, 0x400) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a00), 0x300, 0x0) 09:51:57 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x200c02) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000000c0)={0x4b, 0x3, 0x3, 0x3f, 0x3ff, 0x7}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x118, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x1, 0x1}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}, 0x9a2107d1b8f12f66}, @acquire={0x40046305, 0x2}, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x1}, @exit_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x1, 0x25}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x1a}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0xa, 0x1, 0x26}, @fda={0x66646185, 0x0, 0x2, 0x3a}, @fda={0x66646185, 0x9, 0x2, 0x3}}, &(0x7f0000000380)={0x0, 0x20, 0x40}}}], 0x8e, 0x0, &(0x7f0000000500)="366d5ba622a950b3093e1fd8b70a4d04d112e9922db264acd81bb60e00e0b2846da4f210319184530a6311a08e343ddd264102082465abfe7156c437cb74a685718e86471f844bd1439e6d5850c9aee353b72082924356df90cd599721fded925ae330a90e9a259bdd807b58e1e44bc19b17e7d638dab5a72e7630d803d02b02fba7f8c1464ce334db3b52d80911"}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000640)={0x2, &(0x7f0000000600)=[{0x1, 0x8}, {0x3, 0xe20f}]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000680)={0x0, 0x1, 'client0\x00', 0x1, "6bbcb9c6ef0c7260", "cd64059ba819bde07f4b27db657b8acf6e34c0e46ebb63939834fa89e813ecba", 0x20, 0x401}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000740)={{0x40, 0x7}, 'port1\x00', 0x80, 0x0, 0x2, 0xd5, 0xbe5, 0x80000000, 0xffff, 0x0, 0x4, 0x20}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000800), 0x101000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000840)={{0x81, 0xff}, 'port0\x00', 0x5, 0x80000, 0xff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000900)={0x227, 0x2, 0x1, 'queue0\x00', 0x2}) ioctl$TIOCGPTPEER(r0, 0x5441, 0xb71) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a00), 0x300, 0x0) 09:51:57 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x428801, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$VT_RELDISP(r1, 0x5605) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000140)={0x80, 0x9, 0x8, 0x5, 0x8, "75e98dba33817ed46cc9df31139de19af1ccd6"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"a8eb39dc64730839d1bd77353dac352e", 0x0, 0x0, {0xffffffff, 0x4}, {0x4, 0x1}, 0x0, [0x1, 0x6, 0x1ff, 0x4, 0x200000000000000, 0x3, 0x0, 0xb2f, 0xffffffff, 0x4, 0x6, 0xfffffffffffffffd, 0xff, 0x1f, 0xf4, 0x2]}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$VT_RELDISP(r2, 0x5605) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x8, 0x9}, 'port1\x00', 0x60, 0x80820, 0x9, 0x5, 0x0, 0x0, 0x7, 0x0, 0x4, 0x8}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r5, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x8840) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000600)) r6 = memfd_secret(0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f0000000640)={0x1, 0x3f, 0x3f}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 09:51:57 executing program 1: ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) r0 = memfd_secret(0x80000) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000000c0)={0x7b, 0xfffffffffffffaa1, 0x1, 0x5, 0x80000000, 0x1ff}) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000500)={0x0, 0x1, 0x15, 0x1, 0xce, &(0x7f0000000100)="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"}) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000540)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000580)) r3 = syz_open_pts(r0, 0x44) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f00000005c0)) r4 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000600)={0x5, "6110dd2717d938092f4f1421877ade57377a10ec0af3e64b6f3273419c11603e6133f0143e402434e2ccddd081a3c9146ce8529ede97195cc7d26e0cbc7a4c26cb7581e6b9e8519046020dd5f5b45bc5980c4d60c1cb6391d2fd0727f3f6ec7085e7bf4bc903038601561c90de3802d8973d3a7db169db9ad7b78271f9f85fbb21e461514e990d1c8f9419bfd775510c0883f881d8f9becfef56254c34250813188c3276d58ca7ccf4f1419f504232535ad1b3f93a01df64e034b6ab6ddd2b018d5d2b2297759044bcaf2d88e7dc251b32aadc7321bb75b5913e31f22be345147f9db24b0319b835654c37cf84107644a0ea84aa0e34db1f1a8bfd809524e81788751db2e6f786c235917adb32f7f8455de544dd690192f162632d5f44d26661dc316d22b98db27e2e1f23766e6c0e22e1c74de86ce862c9c41d4243aaeb41d890aa295c4d802da443d2a7385f887028aa9b59cefd1b51c17ea6c589ef1a61a5fb3b1d92bc81a95ff328295a5fe7086876b48e559119886c0a66b024ab9c74c05b5ec9c3075db0fb3f50532733599f8809e8026b8df690c1022522db2d9807805389d46d1378eaaa07a842dc1fd22d104044c12113e69cb1ef95476d92bf7a707dd677002c961989d221171f2728376373ae4db61a6bfeb830e9efea5b1562e05cacbcc0d30f4eda60aad608ff5a4f7beafc300b7e69157780e7a999fa9ce4eb"}) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) 09:51:57 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x200c02) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000000c0)={0x4b, 0x3, 0x3, 0x3f, 0x3ff, 0x7}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x118, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x1, 0x1}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}, 0x9a2107d1b8f12f66}, @acquire={0x40046305, 0x2}, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x1}, @exit_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x1, 0x25}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x1a}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0xa, 0x1, 0x26}, @fda={0x66646185, 0x0, 0x2, 0x3a}, @fda={0x66646185, 0x9, 0x2, 0x3}}, &(0x7f0000000380)={0x0, 0x20, 0x40}}}], 0x8e, 0x0, &(0x7f0000000500)="366d5ba622a950b3093e1fd8b70a4d04d112e9922db264acd81bb60e00e0b2846da4f210319184530a6311a08e343ddd264102082465abfe7156c437cb74a685718e86471f844bd1439e6d5850c9aee353b72082924356df90cd599721fded925ae330a90e9a259bdd807b58e1e44bc19b17e7d638dab5a72e7630d803d02b02fba7f8c1464ce334db3b52d80911"}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000640)={0x2, &(0x7f0000000600)=[{0x1, 0x8}, {0x3, 0xe20f}]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000680)={0x0, 0x1, 'client0\x00', 0x1, "6bbcb9c6ef0c7260", "cd64059ba819bde07f4b27db657b8acf6e34c0e46ebb63939834fa89e813ecba", 0x20, 0x401}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000740)={{0x40, 0x7}, 'port1\x00', 0x80, 0x0, 0x2, 0xd5, 0xbe5, 0x80000000, 0xffff, 0x0, 0x4, 0x20}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000800), 0x101000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000840)={{0x81, 0xff}, 'port0\x00', 0x5, 0x80000, 0xff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000900)={0x227, 0x2, 0x1, 'queue0\x00', 0x2}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a00), 0x300, 0x0) 09:51:57 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x428801, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$VT_RELDISP(r1, 0x5605) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000140)={0x80, 0x9, 0x8, 0x5, 0x8, "75e98dba33817ed46cc9df31139de19af1ccd6"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"a8eb39dc64730839d1bd77353dac352e", 0x0, 0x0, {0xffffffff, 0x4}, {0x4, 0x1}, 0x0, [0x1, 0x6, 0x1ff, 0x4, 0x200000000000000, 0x3, 0x0, 0xb2f, 0xffffffff, 0x4, 0x6, 0xfffffffffffffffd, 0xff, 0x1f, 0xf4, 0x2]}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$VT_RELDISP(r2, 0x5605) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x8, 0x9}, 'port1\x00', 0x60, 0x80820, 0x9, 0x5, 0x0, 0x0, 0x7, 0x0, 0x4, 0x8}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r5, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x8840) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000600)) r6 = memfd_secret(0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f0000000640)={0x1, 0x3f, 0x3f}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 09:51:57 executing program 5: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x41}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000002c0)={0x20, 0x6, 0x7, 0xa12, 0x712a, 0x9}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000020) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan0\x00'}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x4004000) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000ac0)={0x2, 0x0, 0x9, 0x15, 0x7e, &(0x7f00000006c0)="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"}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000b00)={{0x80, 0x1f}, 'port1\x00', 0x0, 0x100000, 0x8, 0x9, 0xde1, 0x1, 0x5, 0x0, 0x3, 0x5}) r4 = memfd_secret(0x0) ioctl$KDENABIO(r4, 0x4b36) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0), 0x600100, 0x0) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff0523}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000d80)={0x2}) 09:51:57 executing program 1: ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) r0 = memfd_secret(0x80000) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000000c0)={0x7b, 0xfffffffffffffaa1, 0x1, 0x5, 0x80000000, 0x1ff}) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000500)={0x0, 0x1, 0x15, 0x1, 0xce, &(0x7f0000000100)="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"}) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000540)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000580)) r3 = syz_open_pts(r0, 0x44) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f00000005c0)) r4 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000600)={0x5, "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"}) 09:52:10 executing program 1: ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) r0 = memfd_secret(0x80000) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000000c0)={0x7b, 0xfffffffffffffaa1, 0x1, 0x5, 0x80000000, 0x1ff}) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000500)={0x0, 0x1, 0x15, 0x1, 0xce, &(0x7f0000000100)="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"}) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000540)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000580)) r3 = syz_open_pts(r0, 0x44) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f00000005c0)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) 09:52:10 executing program 7: mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) shmget(0x1, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) r0 = syz_io_uring_setup(0x523, &(0x7f0000000000)={0x0, 0x591d, 0x8, 0x1, 0x1bf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x100030, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80}]}, 0x24}}, 0x20000001) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KDDELIO(r3, 0x4b35, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) r4 = syz_open_pts(r3, 0x440) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f00000002c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000815}, 0x4008000) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x301602, 0x0) syz_io_uring_setup(0x3dab, &(0x7f0000000440)={0x0, 0xa3d0, 0x10, 0x1, 0x3c6, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x100010, r3, 0xbee2e000) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x11, r7, 0x0) 09:52:10 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x200c02) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000000c0)={0x4b, 0x3, 0x3, 0x3f, 0x3ff, 0x7}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x118, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x1, 0x1}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}, 0x9a2107d1b8f12f66}, @acquire={0x40046305, 0x2}, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x1}, @exit_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x1, 0x25}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x1a}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0xa, 0x1, 0x26}, @fda={0x66646185, 0x0, 0x2, 0x3a}, @fda={0x66646185, 0x9, 0x2, 0x3}}, &(0x7f0000000380)={0x0, 0x20, 0x40}}}], 0x8e, 0x0, &(0x7f0000000500)="366d5ba622a950b3093e1fd8b70a4d04d112e9922db264acd81bb60e00e0b2846da4f210319184530a6311a08e343ddd264102082465abfe7156c437cb74a685718e86471f844bd1439e6d5850c9aee353b72082924356df90cd599721fded925ae330a90e9a259bdd807b58e1e44bc19b17e7d638dab5a72e7630d803d02b02fba7f8c1464ce334db3b52d80911"}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000640)={0x2, &(0x7f0000000600)=[{0x1, 0x8}, {0x3, 0xe20f}]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000680)={0x0, 0x1, 'client0\x00', 0x1, "6bbcb9c6ef0c7260", "cd64059ba819bde07f4b27db657b8acf6e34c0e46ebb63939834fa89e813ecba", 0x20, 0x401}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000740)={{0x40, 0x7}, 'port1\x00', 0x80, 0x0, 0x2, 0xd5, 0xbe5, 0x80000000, 0xffff, 0x0, 0x4, 0x20}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000800), 0x101000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000840)={{0x81, 0xff}, 'port0\x00', 0x5, 0x80000, 0xff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x1}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a00), 0x300, 0x0) 09:52:10 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x428801, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$VT_RELDISP(r1, 0x5605) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000140)={0x80, 0x9, 0x8, 0x5, 0x8, "75e98dba33817ed46cc9df31139de19af1ccd6"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"a8eb39dc64730839d1bd77353dac352e", 0x0, 0x0, {0xffffffff, 0x4}, {0x4, 0x1}, 0x0, [0x1, 0x6, 0x1ff, 0x4, 0x200000000000000, 0x3, 0x0, 0xb2f, 0xffffffff, 0x4, 0x6, 0xfffffffffffffffd, 0xff, 0x1f, 0xf4, 0x2]}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$VT_RELDISP(r2, 0x5605) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x8, 0x9}, 'port1\x00', 0x60, 0x80820, 0x9, 0x5, 0x0, 0x0, 0x7, 0x0, 0x4, 0x8}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r5, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x8840) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000600)) r6 = memfd_secret(0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f0000000640)={0x1, 0x3f, 0x3f}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 09:52:10 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffffaec9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffc}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008081}, 0x850) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2000, @fd_index=0x7, 0x7, 0x0, 0x0, 0x13, 0x1}, 0x1f) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x8, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000081) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r0, 0x618, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xbb}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x44805) socketpair(0x9, 0xa, 0x4, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000580), 0x38101, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000600)={0x0, @l2={0x1f, 0x7, @none, 0x1}, @sco, @nfc={0x27, 0x1, 0x1, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x8, &(0x7f00000005c0)='batadv_slave_1\x00', 0x4, 0x1, 0x1}) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000680)=0x4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000780)={0x0, @xdp={0x2c, 0x2, r4, 0x15}, @nfc={0x27, 0x0, 0x2, 0x4}, @generic={0x27, "139768f20e479c41d7735d4778c2"}, 0x0, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000740)='veth1_virt_wifi\x00', 0x2, 0x9}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40202400}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r6, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004045}, 0x4000001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x91) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r5, 0xc0a85322, &(0x7f0000000a00)) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x10, r1, 0x0) syz_io_uring_setup(0xbc9, &(0x7f0000000ac0)={0x0, 0x4e8c, 0x0, 0x3, 0x79, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000bc0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x12344, 0x0, 0x0, 0x1}, 0xd0) 09:52:10 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x214400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5a0c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c081}, 0x20040841) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x438, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200cc080}, 0x2000c010) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xd3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x480}, 0x20000000) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x84080000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x27}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x44) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, r2, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffec}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x82}, 0x5) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x949}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000900), 0x80c00, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff7f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10001}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x64, r5, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:ssh_keygen_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x200400c1) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0), 0x80000, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r0) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r7, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40005}, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) 09:52:10 executing program 6: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x802, 0x0) r1 = getpgid(0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000040)={r1, 0x1, 0x80000001}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000006}, 0xc815) getpgid(r1) r3 = gettid() perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x6, 0x1, 0x0, 0x9, 0x0, 0x9, 0x1008, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x1, 0x5, 0x24, 0x1, 0x6, 0x1, 0x2, 0x0, 0x3, 0x0, 0x3}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000240)={{0x6, 0x7f}, 'port0\x00', 0x71, 0x100000, 0x2, 0x800, 0x3, 0x1000, 0x7, 0x0, 0x0, 0xd3}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r2) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r5, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x3}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4000, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f00000004c0)={0x4b, 0x5, 0x7}) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x281, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r6) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r8, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40804) r9 = getpgid(0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000680)={r9}) 09:52:10 executing program 5: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x41}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000002c0)={0x20, 0x6, 0x7, 0xa12, 0x712a, 0x9}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000020) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan0\x00'}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x4004000) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000ac0)={0x2, 0x0, 0x9, 0x15, 0x7e, &(0x7f00000006c0)="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"}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000b00)={{0x80, 0x1f}, 'port1\x00', 0x0, 0x100000, 0x8, 0x9, 0xde1, 0x1, 0x5, 0x0, 0x3, 0x5}) r4 = memfd_secret(0x0) ioctl$KDENABIO(r4, 0x4b36) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0), 0x600100, 0x0) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff0523}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 09:52:10 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x200c02) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000000c0)={0x4b, 0x3, 0x3, 0x3f, 0x3ff, 0x7}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x118, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x1, 0x1}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}, 0x9a2107d1b8f12f66}, @acquire={0x40046305, 0x2}, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x1}, @exit_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x1, 0x25}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x1a}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0xa, 0x1, 0x26}, @fda={0x66646185, 0x0, 0x2, 0x3a}, @fda={0x66646185, 0x9, 0x2, 0x3}}, &(0x7f0000000380)={0x0, 0x20, 0x40}}}], 0x8e, 0x0, &(0x7f0000000500)="366d5ba622a950b3093e1fd8b70a4d04d112e9922db264acd81bb60e00e0b2846da4f210319184530a6311a08e343ddd264102082465abfe7156c437cb74a685718e86471f844bd1439e6d5850c9aee353b72082924356df90cd599721fded925ae330a90e9a259bdd807b58e1e44bc19b17e7d638dab5a72e7630d803d02b02fba7f8c1464ce334db3b52d80911"}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000640)={0x2, &(0x7f0000000600)=[{0x1, 0x8}, {0x3, 0xe20f}]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000680)={0x0, 0x1, 'client0\x00', 0x1, "6bbcb9c6ef0c7260", "cd64059ba819bde07f4b27db657b8acf6e34c0e46ebb63939834fa89e813ecba", 0x20, 0x401}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000740)={{0x40, 0x7}, 'port1\x00', 0x80, 0x0, 0x2, 0xd5, 0xbe5, 0x80000000, 0xffff, 0x0, 0x4, 0x20}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000800), 0x101000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a00), 0x300, 0x0) 09:52:10 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x200c02) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000000c0)={0x4b, 0x3, 0x3, 0x3f, 0x3ff, 0x7}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x118, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x1, 0x1}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}, 0x9a2107d1b8f12f66}, @acquire={0x40046305, 0x2}, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x1}, @exit_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x1, 0x25}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x1a}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0xa, 0x1, 0x26}, @fda={0x66646185, 0x0, 0x2, 0x3a}, @fda={0x66646185, 0x9, 0x2, 0x3}}, &(0x7f0000000380)={0x0, 0x20, 0x40}}}], 0x8e, 0x0, &(0x7f0000000500)="366d5ba622a950b3093e1fd8b70a4d04d112e9922db264acd81bb60e00e0b2846da4f210319184530a6311a08e343ddd264102082465abfe7156c437cb74a685718e86471f844bd1439e6d5850c9aee353b72082924356df90cd599721fded925ae330a90e9a259bdd807b58e1e44bc19b17e7d638dab5a72e7630d803d02b02fba7f8c1464ce334db3b52d80911"}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000640)={0x2, &(0x7f0000000600)=[{0x1, 0x8}, {0x3, 0xe20f}]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000680)={0x0, 0x1, 'client0\x00', 0x1, "6bbcb9c6ef0c7260", "cd64059ba819bde07f4b27db657b8acf6e34c0e46ebb63939834fa89e813ecba", 0x20, 0x401}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000740)={{0x40, 0x7}, 'port1\x00', 0x80, 0x0, 0x2, 0xd5, 0xbe5, 0x80000000, 0xffff, 0x0, 0x4, 0x20}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a00), 0x300, 0x0) 09:52:10 executing program 1: ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) r0 = memfd_secret(0x80000) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000000c0)={0x7b, 0xfffffffffffffaa1, 0x1, 0x5, 0x80000000, 0x1ff}) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000500)={0x0, 0x1, 0x15, 0x1, 0xce, &(0x7f0000000100)="20657323086739de2f3392a1aa8ac30247da221e8be937493ee18c131d38b57586ee3d37fa516dfecdc1d77f3e6edd8196d9374a8614a746a59eec1b0d0c7eb6f166e31c617c068165c9b0014d85a088fbdecf6097e1a115c3ba55dada2f4f12fa951ea1fd6975c7ba72ba2d4416f7d1eef1a40f48a21c711246fbbae4d82e438ae8ec2de2ea140af67a431eb6a51eaf72ee3fb882891800a6ebb62d96b36dfe246086eebf526fc337848a100c561eb9f1425f3e995816620c731176c7abdc120c6f420161250c153ad74e89fc368a20ffc1ac1f52beac971af8c78a59040f7354dbbeb95e319d343d7b4e86296f761b83c8ebd16132b2c60326bb6f020e730e0d2b352eae19668c7988a02b7565b98e91914916444eff711b0949e79c9d902094db28d9b169fe88bd8ad9dc8d575bf93d9e02b90c487fdd91a3cedb97bca82435d67a5737eef54928bff12df3700fb11cc0f7607311012a7c759e7ba92b4bbd955f5298916dc8e5884bc2243c04adad11c3e95ae85e2d805cf3288a54748619a8bdb571b4decdcbfe9bef24b395ca5d16a8ffa1bf8d1c6b5c7c725ce09f77fd1ec93ccf8a465171184dcc3c9ab34fb0f3ac79e59d3386cbb53c92e64be77e71bdb16717e8a87a308f94f14c1d8a32b9e0aaad9ae101a097392faef7ee1fc11c713bb7836b335956338b21a6c6df26c2c4fdc4328a2fda48f8ae8b8c913611ea70be294a4fb7ebe598aadee45e63596b279cae56312bcfd7530d8eb080b3ca9220d58ac6244c321e9bde16e8504f273e67f2ec0406dd06e07057d2f1e011cf6f083f1ad27ddf921f94156675f14bf9ef870c0e695ffe0f010b1ba93fc00d13301690e3ffc7acef315e0e1648066c2d9298b87ddd82c8b707c6155ee05cf179349c4efbe4ac565cfa42347366f832f61cf3e0073b865c24736aeab6fd31314bbbc3f9c5601ec50e81350d7dc0e2812873dcee29d3b12c5b152b6e28a66beac54946114d774f13fb403d7069d6fc42b96d6262c1b0b905198c778a4fd5244ccdbda2cdd88f84f60c96117d4d649c0ccf330bb1f3390d8434ff42e9b9b85934de4b224bec8384faf312cc82bf97e3b0f0032ccffdc2a36619f758a921a58f3a7665da699d0f7c3d4009afa1968be70ad4c953ccf5dc84d0e44d1762696fed5fc27c1a25ac4a36a311445bbfddfb61562c5237f3117c052fa6954650846884645a071abd3bbd83c68b898aac471fa4799ca5c160a6284ec71d0a3ba7f6b3e6968dc16ec0912e4680507491a0f1ec38b8ebb7d29e07072c2b34ee9d10100a22a1562cf36e373e2a7ca54d325b17a96e40e2687cbb59387120f08bf7d38827eb2d3fbdd32e86ba417a11e360ee9264ab1898d60d2f6c36d57c93583366fbbe4b825c612a18d4758e86d0172866af026befa9e366a16f971da061681284d92e04140aed"}) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000540)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000580)) r3 = syz_open_pts(r0, 0x44) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f00000005c0)) 09:52:10 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x428801, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$VT_RELDISP(r1, 0x5605) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000140)={0x80, 0x9, 0x8, 0x5, 0x8, "75e98dba33817ed46cc9df31139de19af1ccd6"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"a8eb39dc64730839d1bd77353dac352e", 0x0, 0x0, {0xffffffff, 0x4}, {0x4, 0x1}, 0x0, [0x1, 0x6, 0x1ff, 0x4, 0x200000000000000, 0x3, 0x0, 0xb2f, 0xffffffff, 0x4, 0x6, 0xfffffffffffffffd, 0xff, 0x1f, 0xf4, 0x2]}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$VT_RELDISP(r2, 0x5605) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x8, 0x9}, 'port1\x00', 0x60, 0x80820, 0x9, 0x5, 0x0, 0x0, 0x7, 0x0, 0x4, 0x8}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r5, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x8840) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000600)) memfd_secret(0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000005) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 09:52:10 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x200c02) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000000c0)={0x4b, 0x3, 0x3, 0x3f, 0x3ff, 0x7}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x118, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x1, 0x1}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}, 0x9a2107d1b8f12f66}, @acquire={0x40046305, 0x2}, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x1}, @exit_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x1, 0x25}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x1a}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0xa, 0x1, 0x26}, @fda={0x66646185, 0x0, 0x2, 0x3a}, @fda={0x66646185, 0x9, 0x2, 0x3}}, &(0x7f0000000380)={0x0, 0x20, 0x40}}}], 0x8e, 0x0, &(0x7f0000000500)="366d5ba622a950b3093e1fd8b70a4d04d112e9922db264acd81bb60e00e0b2846da4f210319184530a6311a08e343ddd264102082465abfe7156c437cb74a685718e86471f844bd1439e6d5850c9aee353b72082924356df90cd599721fded925ae330a90e9a259bdd807b58e1e44bc19b17e7d638dab5a72e7630d803d02b02fba7f8c1464ce334db3b52d80911"}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000640)={0x2, &(0x7f0000000600)=[{0x1, 0x8}, {0x3, 0xe20f}]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000680)={0x0, 0x1, 'client0\x00', 0x1, "6bbcb9c6ef0c7260", "cd64059ba819bde07f4b27db657b8acf6e34c0e46ebb63939834fa89e813ecba", 0x20, 0x401}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a00), 0x300, 0x0) 09:52:10 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffffaec9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffc}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008081}, 0x850) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2000, @fd_index=0x7, 0x7, 0x0, 0x0, 0x13, 0x1}, 0x1f) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x8, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000081) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r0, 0x618, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xbb}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x44805) socketpair(0x9, 0xa, 0x4, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000580), 0x38101, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000600)={0x0, @l2={0x1f, 0x7, @none, 0x1}, @sco, @nfc={0x27, 0x1, 0x1, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x8, &(0x7f00000005c0)='batadv_slave_1\x00', 0x4, 0x1, 0x1}) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000680)=0x4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000780)={0x0, @xdp={0x2c, 0x2, r4, 0x15}, @nfc={0x27, 0x0, 0x2, 0x4}, @generic={0x27, "139768f20e479c41d7735d4778c2"}, 0x0, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000740)='veth1_virt_wifi\x00', 0x2, 0x9}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40202400}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r6, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004045}, 0x4000001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x91) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r5, 0xc0a85322, &(0x7f0000000a00)) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x10, r1, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000bc0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x12344, 0x0, 0x0, 0x1}, 0xd0) 09:52:10 executing program 6: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x802, 0x0) r1 = getpgid(0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000040)={r1, 0x1, 0x80000001}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000006}, 0xc815) getpgid(r1) r3 = gettid() perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x6, 0x1, 0x0, 0x9, 0x0, 0x9, 0x1008, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x1, 0x5, 0x24, 0x1, 0x6, 0x1, 0x2, 0x0, 0x3, 0x0, 0x3}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000240)={{0x6, 0x7f}, 'port0\x00', 0x71, 0x100000, 0x2, 0x800, 0x3, 0x1000, 0x7, 0x0, 0x0, 0xd3}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r2) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r5, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x3}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4000, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f00000004c0)={0x4b, 0x5, 0x7}) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x281, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r6) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r8, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40804) getpgid(0x0) 09:52:22 executing program 7: mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) shmget(0x1, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) r0 = syz_io_uring_setup(0x523, &(0x7f0000000000)={0x0, 0x591d, 0x8, 0x1, 0x1bf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x100030, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80}]}, 0x24}}, 0x20000001) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KDDELIO(r3, 0x4b35, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) r4 = syz_open_pts(r3, 0x440) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f00000002c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000815}, 0x4008000) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x301602, 0x0) syz_io_uring_setup(0x3dab, &(0x7f0000000440)={0x0, 0xa3d0, 0x10, 0x1, 0x3c6, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x100010, r3, 0xbee2e000) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) openat$sr(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 09:52:22 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x214400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5a0c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c081}, 0x20040841) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x438, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200cc080}, 0x2000c010) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xd3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x480}, 0x20000000) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x84080000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x27}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x44) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, r2, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffec}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x82}, 0x5) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x949}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000900), 0x80c00, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff7f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10001}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x64, r5, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:ssh_keygen_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x200400c1) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0), 0x80000, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r0) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r7, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40005}, 0x0) 09:52:22 executing program 6: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x802, 0x0) r1 = getpgid(0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000040)={r1, 0x1, 0x80000001}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000006}, 0xc815) getpgid(r1) r3 = gettid() perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x6, 0x1, 0x0, 0x9, 0x0, 0x9, 0x1008, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x1, 0x5, 0x24, 0x1, 0x6, 0x1, 0x2, 0x0, 0x3, 0x0, 0x3}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000240)={{0x6, 0x7f}, 'port0\x00', 0x71, 0x100000, 0x2, 0x800, 0x3, 0x1000, 0x7, 0x0, 0x0, 0xd3}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r2) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r5, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x3}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4000, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f00000004c0)={0x4b, 0x5, 0x7}) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x281, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r6) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r8, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40804) 09:52:22 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffffaec9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffc}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008081}, 0x850) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2000, @fd_index=0x7, 0x7, 0x0, 0x0, 0x13, 0x1}, 0x1f) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x8, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000081) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r0, 0x618, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xbb}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x44805) socketpair(0x9, 0xa, 0x4, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000580), 0x38101, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000600)={0x0, @l2={0x1f, 0x7, @none, 0x1}, @sco, @nfc={0x27, 0x1, 0x1, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x8, &(0x7f00000005c0)='batadv_slave_1\x00', 0x4, 0x1, 0x1}) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000680)=0x4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000780)={0x0, @xdp={0x2c, 0x2, r4, 0x15}, @nfc={0x27, 0x0, 0x2, 0x4}, @generic={0x27, "139768f20e479c41d7735d4778c2"}, 0x0, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000740)='veth1_virt_wifi\x00', 0x2, 0x9}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40202400}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r6, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004045}, 0x4000001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x91) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r5, 0xc0a85322, &(0x7f0000000a00)) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x10, r1, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000bc0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x12344, 0x0, 0x0, 0x1}, 0xd0) 09:52:22 executing program 5: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x41}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000002c0)={0x20, 0x6, 0x7, 0xa12, 0x712a, 0x9}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000020) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan0\x00'}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x4004000) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000ac0)={0x2, 0x0, 0x9, 0x15, 0x7e, &(0x7f00000006c0)="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"}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000b00)={{0x80, 0x1f}, 'port1\x00', 0x0, 0x100000, 0x8, 0x9, 0xde1, 0x1, 0x5, 0x0, 0x3, 0x5}) r4 = memfd_secret(0x0) ioctl$KDENABIO(r4, 0x4b36) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0), 0x600100, 0x0) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff0523}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 09:52:22 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x428801, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$VT_RELDISP(r1, 0x5605) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000140)={0x80, 0x9, 0x8, 0x5, 0x8, "75e98dba33817ed46cc9df31139de19af1ccd6"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"a8eb39dc64730839d1bd77353dac352e", 0x0, 0x0, {0xffffffff, 0x4}, {0x4, 0x1}, 0x0, [0x1, 0x6, 0x1ff, 0x4, 0x200000000000000, 0x3, 0x0, 0xb2f, 0xffffffff, 0x4, 0x6, 0xfffffffffffffffd, 0xff, 0x1f, 0xf4, 0x2]}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$VT_RELDISP(r2, 0x5605) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x8, 0x9}, 'port1\x00', 0x60, 0x80820, 0x9, 0x5, 0x0, 0x0, 0x7, 0x0, 0x4, 0x8}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r5, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x8840) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000600)) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000005) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 09:52:22 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x200c02) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000000c0)={0x4b, 0x3, 0x3, 0x3f, 0x3ff, 0x7}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x118, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x1, 0x1}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}, 0x9a2107d1b8f12f66}, @acquire={0x40046305, 0x2}, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x1}, @exit_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x1, 0x25}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x1a}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0xa, 0x1, 0x26}, @fda={0x66646185, 0x0, 0x2, 0x3a}, @fda={0x66646185, 0x9, 0x2, 0x3}}, &(0x7f0000000380)={0x0, 0x20, 0x40}}}], 0x8e, 0x0, &(0x7f0000000500)="366d5ba622a950b3093e1fd8b70a4d04d112e9922db264acd81bb60e00e0b2846da4f210319184530a6311a08e343ddd264102082465abfe7156c437cb74a685718e86471f844bd1439e6d5850c9aee353b72082924356df90cd599721fded925ae330a90e9a259bdd807b58e1e44bc19b17e7d638dab5a72e7630d803d02b02fba7f8c1464ce334db3b52d80911"}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000640)={0x2, &(0x7f0000000600)=[{0x1, 0x8}, {0x3, 0xe20f}]}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a00), 0x300, 0x0) 09:52:22 executing program 1: ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) r0 = memfd_secret(0x80000) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000000c0)={0x7b, 0xfffffffffffffaa1, 0x1, 0x5, 0x80000000, 0x1ff}) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000500)={0x0, 0x1, 0x15, 0x1, 0xce, &(0x7f0000000100)="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"}) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000540)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000580)) syz_open_pts(r0, 0x44) 09:52:22 executing program 1: ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) r0 = memfd_secret(0x80000) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000000c0)={0x7b, 0xfffffffffffffaa1, 0x1, 0x5, 0x80000000, 0x1ff}) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000500)={0x0, 0x1, 0x15, 0x1, 0xce, &(0x7f0000000100)="20657323086739de2f3392a1aa8ac30247da221e8be937493ee18c131d38b57586ee3d37fa516dfecdc1d77f3e6edd8196d9374a8614a746a59eec1b0d0c7eb6f166e31c617c068165c9b0014d85a088fbdecf6097e1a115c3ba55dada2f4f12fa951ea1fd6975c7ba72ba2d4416f7d1eef1a40f48a21c711246fbbae4d82e438ae8ec2de2ea140af67a431eb6a51eaf72ee3fb882891800a6ebb62d96b36dfe246086eebf526fc337848a100c561eb9f1425f3e995816620c731176c7abdc120c6f420161250c153ad74e89fc368a20ffc1ac1f52beac971af8c78a59040f7354dbbeb95e319d343d7b4e86296f761b83c8ebd16132b2c60326bb6f020e730e0d2b352eae19668c7988a02b7565b98e91914916444eff711b0949e79c9d902094db28d9b169fe88bd8ad9dc8d575bf93d9e02b90c487fdd91a3cedb97bca82435d67a5737eef54928bff12df3700fb11cc0f7607311012a7c759e7ba92b4bbd955f5298916dc8e5884bc2243c04adad11c3e95ae85e2d805cf3288a54748619a8bdb571b4decdcbfe9bef24b395ca5d16a8ffa1bf8d1c6b5c7c725ce09f77fd1ec93ccf8a465171184dcc3c9ab34fb0f3ac79e59d3386cbb53c92e64be77e71bdb16717e8a87a308f94f14c1d8a32b9e0aaad9ae101a097392faef7ee1fc11c713bb7836b335956338b21a6c6df26c2c4fdc4328a2fda48f8ae8b8c913611ea70be294a4fb7ebe598aadee45e63596b279cae56312bcfd7530d8eb080b3ca9220d58ac6244c321e9bde16e8504f273e67f2ec0406dd06e07057d2f1e011cf6f083f1ad27ddf921f94156675f14bf9ef870c0e695ffe0f010b1ba93fc00d13301690e3ffc7acef315e0e1648066c2d9298b87ddd82c8b707c6155ee05cf179349c4efbe4ac565cfa42347366f832f61cf3e0073b865c24736aeab6fd31314bbbc3f9c5601ec50e81350d7dc0e2812873dcee29d3b12c5b152b6e28a66beac54946114d774f13fb403d7069d6fc42b96d6262c1b0b905198c778a4fd5244ccdbda2cdd88f84f60c96117d4d649c0ccf330bb1f3390d8434ff42e9b9b85934de4b224bec8384faf312cc82bf97e3b0f0032ccffdc2a36619f758a921a58f3a7665da699d0f7c3d4009afa1968be70ad4c953ccf5dc84d0e44d1762696fed5fc27c1a25ac4a36a311445bbfddfb61562c5237f3117c052fa6954650846884645a071abd3bbd83c68b898aac471fa4799ca5c160a6284ec71d0a3ba7f6b3e6968dc16ec0912e4680507491a0f1ec38b8ebb7d29e07072c2b34ee9d10100a22a1562cf36e373e2a7ca54d325b17a96e40e2687cbb59387120f08bf7d38827eb2d3fbdd32e86ba417a11e360ee9264ab1898d60d2f6c36d57c93583366fbbe4b825c612a18d4758e86d0172866af026befa9e366a16f971da061681284d92e04140aed"}) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000540)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000580)) 09:52:22 executing program 1: ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) r0 = memfd_secret(0x80000) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000000c0)={0x7b, 0xfffffffffffffaa1, 0x1, 0x5, 0x80000000, 0x1ff}) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000500)={0x0, 0x1, 0x15, 0x1, 0xce, &(0x7f0000000100)="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"}) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000540)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) 09:52:22 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x428801, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$VT_RELDISP(r1, 0x5605) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000140)={0x80, 0x9, 0x8, 0x5, 0x8, "75e98dba33817ed46cc9df31139de19af1ccd6"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"a8eb39dc64730839d1bd77353dac352e", 0x0, 0x0, {0xffffffff, 0x4}, {0x4, 0x1}, 0x0, [0x1, 0x6, 0x1ff, 0x4, 0x200000000000000, 0x3, 0x0, 0xb2f, 0xffffffff, 0x4, 0x6, 0xfffffffffffffffd, 0xff, 0x1f, 0xf4, 0x2]}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$VT_RELDISP(r2, 0x5605) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x8, 0x9}, 'port1\x00', 0x60, 0x80820, 0x9, 0x5, 0x0, 0x0, 0x7, 0x0, 0x4, 0x8}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r5, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x8840) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000005) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) [ 183.734347] Bluetooth: hci2: command 0x0406 tx timeout [ 183.735241] Bluetooth: hci1: command 0x0406 tx timeout [ 183.736027] Bluetooth: hci0: command 0x0406 tx timeout [ 183.736841] Bluetooth: hci7: command 0x0406 tx timeout [ 183.737621] Bluetooth: hci6: command 0x0406 tx timeout 09:52:36 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffffaec9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffc}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008081}, 0x850) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2000, @fd_index=0x7, 0x7, 0x0, 0x0, 0x13, 0x1}, 0x1f) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x8, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000081) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r0, 0x618, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xbb}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x44805) socketpair(0x9, 0xa, 0x4, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000580), 0x38101, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000600)={0x0, @l2={0x1f, 0x7, @none, 0x1}, @sco, @nfc={0x27, 0x1, 0x1, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x8, &(0x7f00000005c0)='batadv_slave_1\x00', 0x4, 0x1, 0x1}) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000680)=0x4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000780)={0x0, @xdp={0x2c, 0x2, r4, 0x15}, @nfc={0x27, 0x0, 0x2, 0x4}, @generic={0x27, "139768f20e479c41d7735d4778c2"}, 0x0, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000740)='veth1_virt_wifi\x00', 0x2, 0x9}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40202400}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r6, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004045}, 0x4000001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x91) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r5, 0xc0a85322, &(0x7f0000000a00)) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x10, r1, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000bc0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x12344, 0x0, 0x0, 0x1}, 0xd0) 09:52:36 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x428801, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$VT_RELDISP(r1, 0x5605) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000140)={0x80, 0x9, 0x8, 0x5, 0x8, "75e98dba33817ed46cc9df31139de19af1ccd6"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"a8eb39dc64730839d1bd77353dac352e", 0x0, 0x0, {0xffffffff, 0x4}, {0x4, 0x1}, 0x0, [0x1, 0x6, 0x1ff, 0x4, 0x200000000000000, 0x3, 0x0, 0xb2f, 0xffffffff, 0x4, 0x6, 0xfffffffffffffffd, 0xff, 0x1f, 0xf4, 0x2]}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$VT_RELDISP(r2, 0x5605) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x8, 0x9}, 'port1\x00', 0x60, 0x80820, 0x9, 0x5, 0x0, 0x0, 0x7, 0x0, 0x4, 0x8}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000005) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 09:52:36 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x200c02) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000000c0)={0x4b, 0x3, 0x3, 0x3f, 0x3ff, 0x7}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x118, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x1, 0x1}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}, 0x9a2107d1b8f12f66}, @acquire={0x40046305, 0x2}, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x1}, @exit_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x1, 0x25}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x1a}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0xa, 0x1, 0x26}, @fda={0x66646185, 0x0, 0x2, 0x3a}, @fda={0x66646185, 0x9, 0x2, 0x3}}, &(0x7f0000000380)={0x0, 0x20, 0x40}}}], 0x8e, 0x0, &(0x7f0000000500)="366d5ba622a950b3093e1fd8b70a4d04d112e9922db264acd81bb60e00e0b2846da4f210319184530a6311a08e343ddd264102082465abfe7156c437cb74a685718e86471f844bd1439e6d5850c9aee353b72082924356df90cd599721fded925ae330a90e9a259bdd807b58e1e44bc19b17e7d638dab5a72e7630d803d02b02fba7f8c1464ce334db3b52d80911"}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a00), 0x300, 0x0) 09:52:36 executing program 5: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x41}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000002c0)={0x20, 0x6, 0x7, 0xa12, 0x712a, 0x9}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000020) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan0\x00'}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x4004000) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000ac0)={0x2, 0x0, 0x9, 0x15, 0x7e, &(0x7f00000006c0)="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"}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000b00)={{0x80, 0x1f}, 'port1\x00', 0x0, 0x100000, 0x8, 0x9, 0xde1, 0x1, 0x5, 0x0, 0x3, 0x5}) r4 = memfd_secret(0x0) ioctl$KDENABIO(r4, 0x4b36) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0), 0x600100, 0x0) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff0523}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 09:52:36 executing program 1: ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) r0 = memfd_secret(0x80000) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000000c0)={0x7b, 0xfffffffffffffaa1, 0x1, 0x5, 0x80000000, 0x1ff}) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000500)={0x0, 0x1, 0x15, 0x1, 0xce, &(0x7f0000000100)="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"}) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000540)) 09:52:36 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x214400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5a0c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c081}, 0x20040841) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x438, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200cc080}, 0x2000c010) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xd3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x480}, 0x20000000) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x84080000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x27}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x44) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, r2, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffec}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x82}, 0x5) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x949}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000900), 0x80c00, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff7f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10001}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x64, r5, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:ssh_keygen_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x200400c1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0), 0x80000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r0) 09:52:36 executing program 6: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x802, 0x0) r1 = getpgid(0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000040)={r1, 0x1, 0x80000001}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000006}, 0xc815) getpgid(r1) r3 = gettid() perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x6, 0x1, 0x0, 0x9, 0x0, 0x9, 0x1008, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x1, 0x5, 0x24, 0x1, 0x6, 0x1, 0x2, 0x0, 0x3, 0x0, 0x3}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000240)={{0x6, 0x7f}, 'port0\x00', 0x71, 0x100000, 0x2, 0x800, 0x3, 0x1000, 0x7, 0x0, 0x0, 0xd3}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r2) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r5, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x3}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4000, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f00000004c0)={0x4b, 0x5, 0x7}) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x281, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40804) 09:52:36 executing program 7: mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) shmget(0x1, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) r0 = syz_io_uring_setup(0x523, &(0x7f0000000000)={0x0, 0x591d, 0x8, 0x1, 0x1bf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x100030, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80}]}, 0x24}}, 0x20000001) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KDDELIO(r3, 0x4b35, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) r4 = syz_open_pts(r3, 0x440) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f00000002c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000815}, 0x4008000) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x301602, 0x0) syz_io_uring_setup(0x3dab, &(0x7f0000000440)={0x0, 0xa3d0, 0x10, 0x1, 0x3c6, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x100010, r3, 0xbee2e000) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) openat$sr(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 09:52:36 executing program 1: ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) r0 = memfd_secret(0x80000) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000000c0)={0x7b, 0xfffffffffffffaa1, 0x1, 0x5, 0x80000000, 0x1ff}) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000500)={0x0, 0x1, 0x15, 0x1, 0xce, &(0x7f0000000100)="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"}) 09:52:37 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x200c02) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000000c0)={0x4b, 0x3, 0x3, 0x3f, 0x3ff, 0x7}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a00), 0x300, 0x0) 09:52:37 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x428801, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$VT_RELDISP(r1, 0x5605) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000140)={0x80, 0x9, 0x8, 0x5, 0x8, "75e98dba33817ed46cc9df31139de19af1ccd6"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"a8eb39dc64730839d1bd77353dac352e", 0x0, 0x0, {0xffffffff, 0x4}, {0x4, 0x1}, 0x0, [0x1, 0x6, 0x1ff, 0x4, 0x200000000000000, 0x3, 0x0, 0xb2f, 0xffffffff, 0x4, 0x6, 0xfffffffffffffffd, 0xff, 0x1f, 0xf4, 0x2]}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$VT_RELDISP(r2, 0x5605) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x8, 0x9}, 'port1\x00', 0x60, 0x80820, 0x9, 0x5, 0x0, 0x0, 0x7, 0x0, 0x4, 0x8}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000005) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 09:52:37 executing program 6: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x802, 0x0) r1 = getpgid(0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000040)={r1, 0x1, 0x80000001}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000006}, 0xc815) getpgid(r1) r3 = gettid() perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x6, 0x1, 0x0, 0x9, 0x0, 0x9, 0x1008, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x1, 0x5, 0x24, 0x1, 0x6, 0x1, 0x2, 0x0, 0x3, 0x0, 0x3}, r3, 0x0, 0xffffffffffffffff, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000240)={{0x6, 0x7f}, 'port0\x00', 0x71, 0x100000, 0x2, 0x800, 0x3, 0x1000, 0x7, 0x0, 0x0, 0xd3}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r2) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r5, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x3}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4000, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f00000004c0)={0x4b, 0x5, 0x7}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40804) 09:52:37 executing program 1: ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) r0 = memfd_secret(0x80000) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000000c0)={0x7b, 0xfffffffffffffaa1, 0x1, 0x5, 0x80000000, 0x1ff}) 09:52:37 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x200c02) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000000c0)={0x4b, 0x3, 0x3, 0x3f, 0x3ff, 0x7}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a00), 0x300, 0x0) 09:52:37 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffffaec9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffc}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008081}, 0x850) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2000, @fd_index=0x7, 0x7, 0x0, 0x0, 0x13, 0x1}, 0x1f) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x8, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000081) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r0, 0x618, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xbb}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x44805) socketpair(0x9, 0xa, 0x4, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000580), 0x38101, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000600)={0x0, @l2={0x1f, 0x7, @none, 0x1}, @sco, @nfc={0x27, 0x1, 0x1, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x8, &(0x7f00000005c0)='batadv_slave_1\x00', 0x4, 0x1, 0x1}) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000680)=0x4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000780)={0x0, @xdp={0x2c, 0x2, r4, 0x15}, @nfc={0x27, 0x0, 0x2, 0x4}, @generic={0x27, "139768f20e479c41d7735d4778c2"}, 0x0, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000740)='veth1_virt_wifi\x00', 0x2, 0x9}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40202400}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r6, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004045}, 0x4000001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x91) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r5, 0xc0a85322, &(0x7f0000000a00)) syz_io_uring_setup(0xbc9, &(0x7f0000000ac0)={0x0, 0x4e8c, 0x0, 0x3, 0x79, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000bc0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x12344, 0x0, 0x0, 0x1}, 0xd0) 09:52:37 executing program 5: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x41}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000002c0)={0x20, 0x6, 0x7, 0xa12, 0x712a, 0x9}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000020) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan0\x00'}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x4004000) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000ac0)={0x2, 0x0, 0x9, 0x15, 0x7e, &(0x7f00000006c0)="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"}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000b00)={{0x80, 0x1f}, 'port1\x00', 0x0, 0x100000, 0x8, 0x9, 0xde1, 0x1, 0x5, 0x0, 0x3, 0x5}) r4 = memfd_secret(0x0) ioctl$KDENABIO(r4, 0x4b36) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0), 0x600100, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000d80)={0x2}) 09:52:37 executing program 7: mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) shmget(0x1, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) r0 = syz_io_uring_setup(0x523, &(0x7f0000000000)={0x0, 0x591d, 0x8, 0x1, 0x1bf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x100030, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80}]}, 0x24}}, 0x20000001) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KDDELIO(r3, 0x4b35, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) r4 = syz_open_pts(r3, 0x440) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f00000002c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000815}, 0x4008000) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x301602, 0x0) syz_io_uring_setup(0x3dab, &(0x7f0000000440)={0x0, 0xa3d0, 0x10, 0x1, 0x3c6, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x100010, r3, 0xbee2e000) openat$sr(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 09:52:37 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x214400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5a0c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c081}, 0x20040841) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x438, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200cc080}, 0x2000c010) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xd3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x480}, 0x20000000) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x84080000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x27}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x44) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, r2, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffec}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x82}, 0x5) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x949}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000900), 0x80c00, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff7f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10001}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x64, r5, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:ssh_keygen_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x200400c1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0), 0x80000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r0) 09:52:37 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x428801, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$VT_RELDISP(r1, 0x5605) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000140)={0x80, 0x9, 0x8, 0x5, 0x8, "75e98dba33817ed46cc9df31139de19af1ccd6"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"a8eb39dc64730839d1bd77353dac352e", 0x0, 0x0, {0xffffffff, 0x4}, {0x4, 0x1}, 0x0, [0x1, 0x6, 0x1ff, 0x4, 0x200000000000000, 0x3, 0x0, 0xb2f, 0xffffffff, 0x4, 0x6, 0xfffffffffffffffd, 0xff, 0x1f, 0xf4, 0x2]}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$VT_RELDISP(r2, 0x5605) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x8, 0x9}, 'port1\x00', 0x60, 0x80820, 0x9, 0x5, 0x0, 0x0, 0x7, 0x0, 0x4, 0x8}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000005) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 09:52:37 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x200c02) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a00), 0x300, 0x0) 09:52:37 executing program 1: ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) r0 = memfd_secret(0x80000) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) [ 187.830391] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 187.831658] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.832558] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.833787] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 187.835159] Call Trace: [ 187.835757] [ 187.836168] __schedule+0x893/0x2470 [ 187.837148] ? io_schedule_timeout+0x150/0x150 [ 187.838167] ? do_raw_spin_lock+0x121/0x260 [ 187.838771] ? rwlock_bug.part.0+0x90/0x90 [ 187.839385] schedule+0xda/0x1b0 [ 187.839885] rescuer_thread+0x851/0xdb0 [ 187.840478] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.841185] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.841889] ? lockdep_hardirqs_on+0x79/0x100 [ 187.842549] ? worker_thread+0x1260/0x1260 [ 187.843186] kthread+0x2ed/0x3a0 [ 187.843686] ? kthread_complete_and_exit+0x40/0x40 [ 187.844409] ret_from_fork+0x22/0x30 [ 187.844970] [ 187.845329] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 187.846262] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.846994] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.848123] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 187.849304] Call Trace: [ 187.849671] [ 187.850004] __schedule+0x893/0x2470 [ 187.850575] ? io_schedule_timeout+0x150/0x150 [ 187.851248] ? do_raw_spin_lock+0x121/0x260 [ 187.851873] ? rwlock_bug.part.0+0x90/0x90 [ 187.852513] schedule+0xda/0x1b0 [ 187.853008] rescuer_thread+0x851/0xdb0 [ 187.853611] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.854354] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.855060] ? lockdep_hardirqs_on+0x79/0x100 [ 187.855745] ? worker_thread+0x1260/0x1260 [ 187.856369] kthread+0x2ed/0x3a0 [ 187.856864] ? kthread_complete_and_exit+0x40/0x40 [ 187.857578] ret_from_fork+0x22/0x30 [ 187.858152] [ 187.858489] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 187.859422] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.860176] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.861242] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 187.862409] Call Trace: [ 187.862783] [ 187.863139] __schedule+0x893/0x2470 [ 187.863707] ? io_schedule_timeout+0x150/0x150 [ 187.864378] ? do_raw_spin_lock+0x121/0x260 [ 187.864991] ? rwlock_bug.part.0+0x90/0x90 [ 187.865628] schedule+0xda/0x1b0 [ 187.866150] rescuer_thread+0x851/0xdb0 [ 187.866728] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.867462] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.868227] ? lockdep_hardirqs_on+0x79/0x100 [ 187.868879] ? worker_thread+0x1260/0x1260 [ 187.869502] kthread+0x2ed/0x3a0 [ 187.869995] ? kthread_complete_and_exit+0x40/0x40 [ 187.870700] ret_from_fork+0x22/0x30 [ 187.871281] [ 187.871619] INFO: task netns:6 blocked for more than 143 seconds. [ 187.872466] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.873192] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.874218] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 187.875335] Call Trace: [ 187.875698] [ 187.876026] __schedule+0x893/0x2470 [ 187.876579] ? io_schedule_timeout+0x150/0x150 [ 187.877233] ? do_raw_spin_lock+0x121/0x260 [ 187.877833] ? rwlock_bug.part.0+0x90/0x90 [ 187.878453] schedule+0xda/0x1b0 [ 187.878934] rescuer_thread+0x851/0xdb0 [ 187.879510] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.880283] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.880983] ? lockdep_hardirqs_on+0x79/0x100 [ 187.881643] ? worker_thread+0x1260/0x1260 [ 187.882273] kthread+0x2ed/0x3a0 [ 187.882763] ? kthread_complete_and_exit+0x40/0x40 [ 187.883483] ret_from_fork+0x22/0x30 [ 187.884046] [ 187.884408] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 187.885343] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.886090] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.887201] task:kworker/0:0 state:I [ 187.887225] Bluetooth: hci4: command 0x0406 tx timeout [ 187.887234] stack:29592 pid:7 ppid:2 flags:0x00004000 [ 187.887640] Bluetooth: hci5: command 0x0406 tx timeout [ 187.888350] Workqueue: 0x0 (ata_sff) [ 187.888382] Call Trace: [ 187.888390] [ 187.888407] __schedule+0x893/0x2470 [ 187.888857] Bluetooth: hci3: command 0x0406 tx timeout [ 187.889587] ? io_schedule_timeout+0x150/0x150 [ 187.892491] schedule+0xda/0x1b0 [ 187.893004] worker_thread+0x15f/0x1260 [ 187.893691] ? process_one_work+0x16a0/0x16a0 [ 187.894379] kthread+0x2ed/0x3a0 [ 187.894873] ? kthread_complete_and_exit+0x40/0x40 [ 187.895610] ret_from_fork+0x22/0x30 [ 187.896188] [ 187.896524] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 187.897462] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.898213] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.899249] task:kworker/0:0H state:I stack:28952 pid:8 ppid:2 flags:0x00004000 [ 187.900393] Workqueue: 0x0 (kblockd) [ 187.900920] Call Trace: [ 187.901302] [ 187.901628] __schedule+0x893/0x2470 [ 187.902216] ? io_schedule_timeout+0x150/0x150 [ 187.902883] schedule+0xda/0x1b0 [ 187.903405] worker_thread+0x15f/0x1260 [ 187.904020] ? process_one_work+0x16a0/0x16a0 [ 187.904703] kthread+0x2ed/0x3a0 [ 187.905228] ? kthread_complete_and_exit+0x40/0x40 [ 187.905937] ret_from_fork+0x22/0x30 [ 187.906521] [ 187.906863] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 187.907798] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.908525] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.909565] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 187.910684] Call Trace: [ 187.911037] [ 187.911380] __schedule+0x893/0x2470 [ 187.911921] ? io_schedule_timeout+0x150/0x150 [ 187.912571] ? do_raw_spin_lock+0x121/0x260 [ 187.913190] ? rwlock_bug.part.0+0x90/0x90 [ 187.913778] schedule+0xda/0x1b0 [ 187.914281] rescuer_thread+0x851/0xdb0 [ 187.914830] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.915550] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.916303] ? lockdep_hardirqs_on+0x79/0x100 [ 187.916945] ? worker_thread+0x1260/0x1260 [ 187.917582] kthread+0x2ed/0x3a0 [ 187.918074] ? kthread_complete_and_exit+0x40/0x40 [ 187.918804] ret_from_fork+0x22/0x30 [ 187.919391] [ 187.919736] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 187.920751] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.921528] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.922649] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 187.923861] Call Trace: [ 187.924274] [ 187.924610] __schedule+0x893/0x2470 [ 187.925206] ? io_schedule_timeout+0x150/0x150 [ 187.925859] ? mark_held_locks+0x9e/0xe0 [ 187.926484] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.927254] schedule+0xda/0x1b0 [ 187.927780] rcu_tasks_one_gp+0x3db/0xc10 [ 187.928444] rcu_tasks_kthread+0x80/0xa0 [ 187.929025] ? rcu_tasks_postscan+0x10/0x10 [ 187.929689] kthread+0x2ed/0x3a0 [ 187.930222] ? kthread_complete_and_exit+0x40/0x40 [ 187.930921] ret_from_fork+0x22/0x30 [ 187.931533] [ 187.976158] INFO: task kworker/1:0:20 blocked for more than 143 seconds. [ 187.977074] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.977839] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.978870] task:kworker/1:0 state:I stack:29760 pid:20 ppid:2 flags:0x00004000 [ 187.980008] Workqueue: 0x0 (rcu_gp) [ 187.980540] Call Trace: [ 187.980890] [ 187.981239] __schedule+0x893/0x2470 [ 187.981759] ? io_schedule_timeout+0x150/0x150 [ 187.982413] schedule+0xda/0x1b0 [ 187.982883] worker_thread+0x15f/0x1260 [ 187.983484] ? process_one_work+0x16a0/0x16a0 [ 187.984145] kthread+0x2ed/0x3a0 [ 187.984607] ? kthread_complete_and_exit+0x40/0x40 [ 187.985291] ret_from_fork+0x22/0x30 [ 187.985825] [ 187.986221] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 187.987152] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.987883] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.988932] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 187.990097] Workqueue: 0x0 (events_highpri) [ 187.990733] Call Trace: [ 187.991089] [ 187.991470] __schedule+0x893/0x2470 [ 187.992020] ? io_schedule_timeout+0x150/0x150 [ 187.992726] schedule+0xda/0x1b0 [ 187.993254] worker_thread+0x15f/0x1260 [ 187.993850] ? process_one_work+0x16a0/0x16a0 [ 187.994516] kthread+0x2ed/0x3a0 [ 187.994979] ? kthread_complete_and_exit+0x40/0x40 [ 187.995708] ret_from_fork+0x22/0x30 [ 187.996272] [ 187.996666] [ 187.996666] Showing all locks held in the system: [ 187.997523] 1 lock held by rcu_tasks_kthre/11: [ 187.998184] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 187.999566] 1 lock held by khungtaskd/25: [ 188.000168] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 188.001457] 1 lock held by in:imklog/193: [ 188.002021] #0: ffff88800f1dd268 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 [ 188.003265] 2 locks held by syz-executor/4299: [ 188.003891] [ 188.004181] ============================================= [ 188.004181] VM DIAGNOSIS: 09:52:40 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=00000000000004e6 RCX=ffffffff8129c0db RDX=fffffbfff0d9a70c RSI=0000000000000008 RDI=ffffffff86cd3858 RBP=ffff888038468a3a RSP=ffff888037517830 R8 =0000000000000000 R9 =ffffffff86cd385f R10=fffffbfff0d9a70b R11=0000000000000001 R12=ffff888038468000 R13=ffff888038468a18 R14=ffff888038468978 R15=dffffc0000000000 RIP=ffffffff8129c0e3 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555555c5c400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000563ce9b0a0e0 CR3=000000001a58c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 000000000000002f 002f2e2e2f002e2e YMM01=0000000000000000 0000000000000000 0000000000000000 696c61766e49002f YMM02=0000000000000000 0000000000000000 ffffffffffffff0f 0e0d0c0b0a090807 YMM03=0000000000000000 0000000000000000 696e656420737365 636341002f737973 YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000563ce9aedd30 0000000400000009 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 610064253a64252f 6b636f6c622f7665 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000033 R11=0000000000000001 R12=0000000000000033 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000563ce9b2e540 CR3=000000001741a000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 4153ed5800000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000