Warning: Permanently added '[localhost]:23533' (ECDSA) to the list of known hosts. 2022/10/01 04:16:54 fuzzer started 2022/10/01 04:16:55 dialing manager at localhost:35095 syzkaller login: [ 44.457689] cgroup: Unknown subsys name 'net' [ 44.566094] cgroup: Unknown subsys name 'rlimit' 2022/10/01 04:17:08 syscalls: 204 2022/10/01 04:17:08 code coverage: enabled 2022/10/01 04:17:08 comparison tracing: enabled 2022/10/01 04:17:08 extra coverage: enabled 2022/10/01 04:17:08 setuid sandbox: enabled 2022/10/01 04:17:08 namespace sandbox: enabled 2022/10/01 04:17:08 Android sandbox: enabled 2022/10/01 04:17:08 fault injection: enabled 2022/10/01 04:17:08 leak checking: enabled 2022/10/01 04:17:08 net packet injection: enabled 2022/10/01 04:17:08 net device setup: enabled 2022/10/01 04:17:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/01 04:17:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/01 04:17:08 USB emulation: enabled 2022/10/01 04:17:08 hci packet injection: enabled 2022/10/01 04:17:08 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/01 04:17:08 802.15.4 emulation: enabled 2022/10/01 04:17:08 fetching corpus: 0, signal 0/0 (executing program) 2022/10/01 04:17:09 starting 8 fuzzer processes 04:17:09 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x699c1) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000100)) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x10002, 0x51, 0x4}, 0x18) io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x9570, r3, &(0x7f00000001c0)="b78a4f74d3605bd30f56252ec34d7a2051325a9ba1d8705462081b5ff3ae4e6bbf161eafe219c8ba34fb15cebf3247b70cb7db491cc2a5bd44694f5943b59b3b2b28052dfd3949c97f24bbb59903e08d2cb73eeaad2938d7e1ff4e26a3aa1ddd667b16b34ecff5174b1e11735cfb4b47e2bf8e8edf1e2b947ce2d939985732f87253049b15d4f3", 0x87, 0x80}, &(0x7f00000002c0)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000300)) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000340)=0x8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x1, r1, &(0x7f00000003c0)="931959d40ea24cc557c326dad574daa2a13a434bf5b6f60b8de1679e9c2f94c000f879407a5268acc5f63d2bbe3ecfbf43235f1f6ee22f55a9b3704c29", 0x3d, 0x9, 0x0, 0x2, r1}]) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000480)) setxattr$trusted_overlay_origin(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540), 0x2, 0x3) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x814) r6 = syz_open_dev$usbmon(&(0x7f00000006c0), 0x40, 0x200) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000740)={&(0x7f0000000700)=[0x0, 0x0, 0x0], 0x3, 0x40}) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000007c0)) 04:17:09 executing program 7: r0 = getpid() ptrace$poke(0x5, r0, &(0x7f0000000000), 0x2) ptrace$poke(0x5, r0, &(0x7f0000000040), 0x9) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x1, 0x10000023, 0x4, 0x8, 0x6, 0x10001, 0x1, 0x97e, 0xff}, 0x0) wait4(r0, &(0x7f00000000c0), 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x100000000, 0x100) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000140)={0x1, 0x8, 0x5, 0x0, 0x12, "a2917d908593e6a7"}) sched_setattr(r0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x67, 0xe1, 0x1000200000000, 0x8, 0x7, 0x2, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$P9_RREADDIR(r2, &(0x7f0000000200)={0xe4, 0x29, 0x2, {0x1, [{{0x4, 0x2, 0x3}, 0x3, 0x9, 0x7, './file0'}, {{0x40, 0x0, 0x1}, 0x3, 0x7, 0x7, './file0'}, {{0x1, 0x0, 0x6}, 0x7, 0x0, 0x7, './file0'}, {{0x20, 0x4}, 0x400, 0x9, 0x7, './file0'}, {{0x1, 0x3}, 0x20, 0x8, 0x7, './file0'}, {{0x10, 0x2, 0x8}, 0x8000000000, 0x0, 0x7, './file0'}, {{0x0, 0x3, 0x1}, 0x10000, 0xa2, 0x7, './file0'}]}}, 0xe4) r3 = syz_open_dev$mouse(&(0x7f0000000300), 0xffffffff, 0x1090c0) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0xe, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x400c0c5) r4 = getpid() wait4(r4, &(0x7f0000000440), 0x4, &(0x7f0000000480)) process_vm_writev(r4, &(0x7f0000000600)=[{&(0x7f0000000540)=""/63, 0x3f}, {&(0x7f0000000580)=""/83, 0x53}], 0x2, &(0x7f0000000780)=[{&(0x7f0000000640)=""/111, 0x6f}, {&(0x7f00000006c0)=""/162, 0xa2}], 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f00000007c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$P9_RREADDIR(r3, &(0x7f0000000a00)={0x4f, 0x29, 0x1, {0x40, [{{0x10, 0x3, 0x4}, 0xffffffff, 0x3, 0x7, './file0'}, {{0x10, 0x0, 0x2}, 0xd0, 0x68, 0xd, './file0/file0'}]}}, 0x4f) write$cgroup_int(r1, &(0x7f0000000a80)=0xffffffffffffffbc, 0x12) waitid(0x0, r4, 0x0, 0x4, &(0x7f0000000ac0)) getuid() 04:17:09 executing program 2: r0 = getpgrp(0x0) waitid(0x3, r0, &(0x7f0000000000), 0x1, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) waitid(0x1, r0, &(0x7f0000000140), 0x1, &(0x7f00000001c0)) getpid() r1 = getpgrp(r0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000280)={r1}) syz_open_dev$usbmon(&(0x7f00000002c0), 0x100, 0x111002) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x4040800) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="8d4cc7159281"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8044}, 0x860) open$dir(&(0x7f0000000540)='.\x00', 0x42000, 0x84) tkill(0xffffffffffffffff, 0x2d) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000580)={0xc5, 0x29, 0x1, {0x3ff, [{{0x10, 0x4, 0x3}, 0x6, 0x4, 0x7, './file0'}, {{0x4, 0x2}, 0x1, 0x80, 0x7, './file0'}, {{0x20, 0x4, 0x6}, 0x7f, 0x7, 0x7, './file0'}, {{0x20, 0x3, 0x6}, 0x7, 0x7, 0x7, './file0'}, {{0x8, 0x3, 0x5}, 0x10001, 0x8, 0x7, './file0'}, {{0x8, 0x1, 0x6}, 0x8000, 0x2, 0x7, './file0'}]}}, 0xc5) r2 = getpid() r3 = getpid() tgkill(r2, r3, 0xd) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs2/binder0\x00', 0x802, 0x0) r5 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f00000006c0)={r5}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000000) 04:17:09 executing program 0: r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x70000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r1, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x68}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x22}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x401}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r2 = syz_open_dev$usbmon(&(0x7f0000000400), 0xb2, 0x80000) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) io_setup(0x0, &(0x7f0000000440)=0x0) io_cancel(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x4, r2, &(0x7f0000000480)="b900dd845382dea2338d268e3b9eb268376ab5", 0x13, 0x1, 0x0, 0x3}, &(0x7f0000000500)) r4 = syz_open_dev$mouse(&(0x7f0000000540), 0x8, 0x244100) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40885}, 0x10) socketpair(0x27, 0x5, 0xffff, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004082) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xac}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffd}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r8 = socket(0x27, 0xe8e817c5a7242f21, 0x2) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3fc00}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x40400c0) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82307201, &(0x7f0000000b00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, r1, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}]}, 0x34}}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x18, 0x1, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_SYNPROXY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000040}, 0x10800) 04:17:09 executing program 3: sendto(0xffffffffffffffff, &(0x7f0000000000)="3698d5e302bf1832beca91bb33799cbeaf3ac85588bb506c9a0efc482430ef117fa3c43c93d7f3a8a39c0505f5a3608345c409d0c1f887334af5536f83a13338ad7f758f24d27771bb3ee5e21b84eec0854d21", 0x53, 0x800, &(0x7f0000000080)=@phonet={0x23, 0x7, 0xa0, 0x7}, 0x80) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="cecb86f85e88034e777c98b24e375cdad7603c65bd0d754100d663ef0b93d3468128c479e19fa8591590f033713970725769ad169dfa55e216c791aa875db3b1edd57c30d7187c58258d", 0x4a, 0x4000, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) sendto(r0, &(0x7f0000000300)="a29661fd7e2e04bc02ec888c59646191c740403d35c849c0d563fd8ff6f84257bf4263c9f6bb53e9bed24cf9a4aed9b6e013ed00ecb258fb3a1dfbe0bffed68302c006cecf", 0x45, 0x80, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x400c804) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40004) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000081) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x87ac}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x14) r2 = getpgrp(0x0) sched_setattr(r2, &(0x7f0000000800)={0x38, 0x1, 0x2, 0x7, 0x7fffffff, 0x400, 0x1, 0x5, 0x6, 0x80000000}, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000840), 0x9, 0x100) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x40000) clock_nanosleep(0x3, 0x0, &(0x7f0000000a00)={0x77359400}, &(0x7f0000000a40)) syz_open_dev$mouse(&(0x7f0000000a80), 0x7, 0x10000) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000ac0)=@req3={0x3, 0x4, 0x8, 0x1, 0x8, 0x8, 0xffff8000}, 0x1c) [ 58.224697] audit: type=1400 audit(1664597829.378:6): avc: denied { execmem } for pid=288 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:17:09 executing program 4: sched_setattr(0xffffffffffffffff, &(0x7f0000000000)={0x38, 0x1, 0x18, 0x81, 0x5, 0x0, 0x0, 0x1f, 0x6, 0x80}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000040)={0x38, 0x5, 0x73, 0x1, 0x3, 0x6, 0x9, 0x8, 0xffffff84, 0xfa}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000080)={0x38, 0x5, 0x40, 0xae22, 0x8, 0x4, 0xb268, 0x3, 0xff, 0x3}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x10000040, 0x8000, 0x2, 0x8, 0x0, 0x0, 0x8000, 0x1}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x2, 0xe, 0x7, 0x82, 0x100000000, 0x7ff, 0x8000000000000000, 0x3}, 0x0) getpid() r0 = getpid() sched_setattr(r0, &(0x7f0000000140)={0x38, 0x3, 0x14, 0x6ca1c65c, 0x1, 0x3, 0x2, 0x6d8, 0x40, 0x100}, 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x8000, 0x50) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x3, 0x0, 0x4, 0x962, 0x3, 0x8, 0x10001, 0x7, 0x1}, 0x0) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000280)=""/155) setpgid(r3, r3) sched_setattr(r3, &(0x7f0000000340)={0x38, 0x3, 0x10000001, 0x9, 0x7, 0x2, 0x5, 0x3f, 0x3ff, 0x1966bb89}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4200080}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x8, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x17759) sched_setattr(0xffffffffffffffff, &(0x7f0000000480)={0x38, 0x6, 0x1, 0x2f, 0x400, 0xffffffff, 0x0, 0x8000, 0x80000001}, 0x0) 04:17:09 executing program 5: sched_yield() sched_yield() r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9f6, 0x80200) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) prctl$PR_SVE_GET_VL(0x33, 0x1cfa4) sched_yield() ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000280)) sched_yield() ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f00000002c0)={0x3, 0x1, 0x7b8, 0x8, 0x5, 0x4}) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x8010, r0, 0x9) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000340)='\'^\'-[\\\x00', &(0x7f0000000380)=':#{%%\'%:$(],\x00', &(0x7f00000003c0)='@-&\x00'], &(0x7f0000000640)=[&(0x7f0000000440)='/dev/usbmon#\x00', &(0x7f0000000480)='/dev/usbmon#\x00', &(0x7f00000004c0)='/dev/usbmon#\x00', &(0x7f0000000500)='/dev/usbmon#\x00', &(0x7f0000000540)='/dev/usbmon#\x00', &(0x7f0000000580)='/dev/usbmon#\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='/dev/usbmon#\x00']) prctl$PR_SVE_GET_VL(0x33, 0x2b4c) prctl$PR_SVE_GET_VL(0x33, 0x172ca) socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r2, 0x800, 0x0, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000a80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x1ac, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x9c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_ID={0x6c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1ff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x300}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffa}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x20, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xc16}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_SEC_DEVKEY={0xbc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffffe1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x8001}, 0x4) 04:17:09 executing program 6: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x800, 0x20080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @random="844e53aa344e"}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10044040}, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xbd}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x800}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4000094) r3 = syz_open_dev$hiddev(&(0x7f0000000340), 0xc7, 0x430900) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f0000000380)={0x3, 0x200, 0x7}) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f00000003c0)={0x1, 0x2, 0xaec}) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f0000000400)={0x2, 0x1, 0x10000, 0x100, 0xfffffff7, 0x7fff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$HIDIOCGREPORTINFO(r3, 0xc00c4809, &(0x7f0000000580)={0x3, 0x2, 0x7}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc275}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) getsockname$packet(r0, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000840)=0x14) sendto$packet(r0, &(0x7f0000000740)="eac34db01a69cd3a024d532780f5b07efdf33f90c9f1c368e67520825400bb049aac7fb2bcbf34a47fc4ca855316c535c5fe88511b7f4d5332dc470dc306b78e1513c6e0727972b0479220530201318bdce4e5b1f0591ceaea23096858d25774b0900091e5614305a9aec3f6ce6e291c3484d4c583d7fc62654422b726788207dc7112f539eda1f7828a34fe58ac14", 0x8f, 0x48000, &(0x7f0000000880)={0x11, 0x0, r6, 0x1, 0xbb, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f00000008c0)={0x3, 0x1, 0x5}) sendto$packet(r0, &(0x7f0000000900)="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", 0x1000, 0x80, &(0x7f0000001900)={0x11, 0xf6, r6, 0x1, 0x92, 0x6, @remote}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001940)={0x2, 0x6}, 0x4) [ 59.408207] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.411033] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.412595] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.416222] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.418827] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.420248] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.426042] Bluetooth: hci0: HCI_REQ-0x0c1a [ 59.454956] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.456937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.459468] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.462274] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.464972] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.466591] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.467771] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.472285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 59.473645] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.473747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.478868] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 59.480259] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.485908] Bluetooth: hci1: HCI_REQ-0x0c1a [ 59.489063] Bluetooth: hci2: HCI_REQ-0x0c1a [ 59.565832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 59.568309] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 59.573157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.576967] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 59.584860] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 59.586306] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.587563] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 59.589126] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 59.590335] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.591805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 59.593146] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 59.596101] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 59.597475] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.599732] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 59.601260] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 59.604785] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 59.606090] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 59.607288] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 59.608979] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.610074] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 59.611377] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 59.613257] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 59.614923] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 59.618979] Bluetooth: hci4: HCI_REQ-0x0c1a [ 59.620232] Bluetooth: hci7: HCI_REQ-0x0c1a [ 59.621504] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 59.640639] Bluetooth: hci5: HCI_REQ-0x0c1a [ 59.664342] Bluetooth: hci6: HCI_REQ-0x0c1a [ 61.492001] Bluetooth: hci0: command 0x0409 tx timeout [ 61.555748] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 61.556715] Bluetooth: hci2: command 0x0409 tx timeout [ 61.557289] Bluetooth: hci1: command 0x0409 tx timeout [ 61.682685] Bluetooth: hci4: command 0x0409 tx timeout [ 61.683294] Bluetooth: hci7: command 0x0409 tx timeout [ 61.684125] Bluetooth: hci6: command 0x0409 tx timeout [ 61.684650] Bluetooth: hci5: command 0x0409 tx timeout [ 63.539726] Bluetooth: hci0: command 0x041b tx timeout [ 63.602711] Bluetooth: hci1: command 0x041b tx timeout [ 63.603172] Bluetooth: hci2: command 0x041b tx timeout [ 63.731728] Bluetooth: hci5: command 0x041b tx timeout [ 63.732186] Bluetooth: hci6: command 0x041b tx timeout [ 63.732585] Bluetooth: hci7: command 0x041b tx timeout [ 63.733017] Bluetooth: hci4: command 0x041b tx timeout [ 64.181665] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.182819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.183511] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.185093] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.186121] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.186821] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.189291] Bluetooth: hci3: HCI_REQ-0x0c1a [ 65.586695] Bluetooth: hci0: command 0x040f tx timeout [ 65.651789] Bluetooth: hci2: command 0x040f tx timeout [ 65.652246] Bluetooth: hci1: command 0x040f tx timeout [ 65.778713] Bluetooth: hci4: command 0x040f tx timeout [ 65.779186] Bluetooth: hci7: command 0x040f tx timeout [ 65.779629] Bluetooth: hci6: command 0x040f tx timeout [ 65.780023] Bluetooth: hci5: command 0x040f tx timeout [ 66.227688] Bluetooth: hci3: command 0x0409 tx timeout [ 67.634652] Bluetooth: hci0: command 0x0419 tx timeout [ 67.699687] Bluetooth: hci1: command 0x0419 tx timeout [ 67.700141] Bluetooth: hci2: command 0x0419 tx timeout [ 67.827195] Bluetooth: hci5: command 0x0419 tx timeout [ 67.827964] Bluetooth: hci6: command 0x0419 tx timeout [ 67.828356] Bluetooth: hci7: command 0x0419 tx timeout [ 67.828786] Bluetooth: hci4: command 0x0419 tx timeout [ 68.275646] Bluetooth: hci3: command 0x041b tx timeout [ 70.323668] Bluetooth: hci3: command 0x040f tx timeout [ 72.370809] Bluetooth: hci3: command 0x0419 tx timeout 04:18:04 executing program 2: r0 = getpgrp(0x0) waitid(0x3, r0, &(0x7f0000000000), 0x1, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) waitid(0x1, r0, &(0x7f0000000140), 0x1, &(0x7f00000001c0)) getpid() r1 = getpgrp(r0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000280)={r1}) syz_open_dev$usbmon(&(0x7f00000002c0), 0x100, 0x111002) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x4040800) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="8d4cc7159281"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8044}, 0x860) open$dir(&(0x7f0000000540)='.\x00', 0x42000, 0x84) tkill(0xffffffffffffffff, 0x2d) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000580)={0xc5, 0x29, 0x1, {0x3ff, [{{0x10, 0x4, 0x3}, 0x6, 0x4, 0x7, './file0'}, {{0x4, 0x2}, 0x1, 0x80, 0x7, './file0'}, {{0x20, 0x4, 0x6}, 0x7f, 0x7, 0x7, './file0'}, {{0x20, 0x3, 0x6}, 0x7, 0x7, 0x7, './file0'}, {{0x8, 0x3, 0x5}, 0x10001, 0x8, 0x7, './file0'}, {{0x8, 0x1, 0x6}, 0x8000, 0x2, 0x7, './file0'}]}}, 0xc5) r2 = getpid() r3 = getpid() tgkill(r2, r3, 0xd) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs2/binder0\x00', 0x802, 0x0) r5 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f00000006c0)={r5}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000000) 04:18:04 executing program 2: r0 = getpgrp(0x0) waitid(0x3, r0, &(0x7f0000000000), 0x1, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) waitid(0x1, r0, &(0x7f0000000140), 0x1, &(0x7f00000001c0)) getpid() r1 = getpgrp(r0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000280)={r1}) syz_open_dev$usbmon(&(0x7f00000002c0), 0x100, 0x111002) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x4040800) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="8d4cc7159281"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8044}, 0x860) open$dir(&(0x7f0000000540)='.\x00', 0x42000, 0x84) tkill(0xffffffffffffffff, 0x2d) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000580)={0xc5, 0x29, 0x1, {0x3ff, [{{0x10, 0x4, 0x3}, 0x6, 0x4, 0x7, './file0'}, {{0x4, 0x2}, 0x1, 0x80, 0x7, './file0'}, {{0x20, 0x4, 0x6}, 0x7f, 0x7, 0x7, './file0'}, {{0x20, 0x3, 0x6}, 0x7, 0x7, 0x7, './file0'}, {{0x8, 0x3, 0x5}, 0x10001, 0x8, 0x7, './file0'}, {{0x8, 0x1, 0x6}, 0x8000, 0x2, 0x7, './file0'}]}}, 0xc5) r2 = getpid() r3 = getpid() tgkill(r2, r3, 0xd) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs2/binder0\x00', 0x802, 0x0) r5 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f00000006c0)={r5}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000000) 04:18:04 executing program 0: r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x70000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r1, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x68}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x22}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x401}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r2 = syz_open_dev$usbmon(&(0x7f0000000400), 0xb2, 0x80000) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) io_setup(0x0, &(0x7f0000000440)=0x0) io_cancel(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x4, r2, &(0x7f0000000480)="b900dd845382dea2338d268e3b9eb268376ab5", 0x13, 0x1, 0x0, 0x3}, &(0x7f0000000500)) r4 = syz_open_dev$mouse(&(0x7f0000000540), 0x8, 0x244100) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40885}, 0x10) socketpair(0x27, 0x5, 0xffff, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004082) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xac}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffd}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r8 = socket(0x27, 0xe8e817c5a7242f21, 0x2) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3fc00}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x40400c0) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82307201, &(0x7f0000000b00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, r1, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}]}, 0x34}}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x18, 0x1, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_SYNPROXY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000040}, 0x10800) 04:18:04 executing program 2: r0 = getpgrp(0x0) waitid(0x3, r0, &(0x7f0000000000), 0x1, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) waitid(0x1, r0, &(0x7f0000000140), 0x1, &(0x7f00000001c0)) getpid() r1 = getpgrp(r0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000280)={r1}) syz_open_dev$usbmon(&(0x7f00000002c0), 0x100, 0x111002) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x4040800) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="8d4cc7159281"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8044}, 0x860) open$dir(&(0x7f0000000540)='.\x00', 0x42000, 0x84) tkill(0xffffffffffffffff, 0x2d) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000580)={0xc5, 0x29, 0x1, {0x3ff, [{{0x10, 0x4, 0x3}, 0x6, 0x4, 0x7, './file0'}, {{0x4, 0x2}, 0x1, 0x80, 0x7, './file0'}, {{0x20, 0x4, 0x6}, 0x7f, 0x7, 0x7, './file0'}, {{0x20, 0x3, 0x6}, 0x7, 0x7, 0x7, './file0'}, {{0x8, 0x3, 0x5}, 0x10001, 0x8, 0x7, './file0'}, {{0x8, 0x1, 0x6}, 0x8000, 0x2, 0x7, './file0'}]}}, 0xc5) r2 = getpid() r3 = getpid() tgkill(r2, r3, 0xd) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs2/binder0\x00', 0x802, 0x0) r5 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f00000006c0)={r5}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000000) 04:18:04 executing program 2: r0 = getpgrp(0x0) waitid(0x3, r0, &(0x7f0000000000), 0x1, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) waitid(0x1, r0, &(0x7f0000000140), 0x1, &(0x7f00000001c0)) getpid() r1 = getpgrp(r0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000280)={r1}) syz_open_dev$usbmon(&(0x7f00000002c0), 0x100, 0x111002) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x4040800) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="8d4cc7159281"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8044}, 0x860) open$dir(&(0x7f0000000540)='.\x00', 0x42000, 0x84) tkill(0xffffffffffffffff, 0x2d) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000580)={0xc5, 0x29, 0x1, {0x3ff, [{{0x10, 0x4, 0x3}, 0x6, 0x4, 0x7, './file0'}, {{0x4, 0x2}, 0x1, 0x80, 0x7, './file0'}, {{0x20, 0x4, 0x6}, 0x7f, 0x7, 0x7, './file0'}, {{0x20, 0x3, 0x6}, 0x7, 0x7, 0x7, './file0'}, {{0x8, 0x3, 0x5}, 0x10001, 0x8, 0x7, './file0'}, {{0x8, 0x1, 0x6}, 0x8000, 0x2, 0x7, './file0'}]}}, 0xc5) r2 = getpid() r3 = getpid() tgkill(r2, r3, 0xd) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs2/binder0\x00', 0x802, 0x0) r5 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f00000006c0)={r5}) 04:18:04 executing program 0: r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x70000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r1, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x68}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x22}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x401}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r2 = syz_open_dev$usbmon(&(0x7f0000000400), 0xb2, 0x80000) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) io_setup(0x0, &(0x7f0000000440)=0x0) io_cancel(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x4, r2, &(0x7f0000000480)="b900dd845382dea2338d268e3b9eb268376ab5", 0x13, 0x1, 0x0, 0x3}, &(0x7f0000000500)) r4 = syz_open_dev$mouse(&(0x7f0000000540), 0x8, 0x244100) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40885}, 0x10) socketpair(0x27, 0x5, 0xffff, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004082) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xac}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffd}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r8 = socket(0x27, 0xe8e817c5a7242f21, 0x2) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3fc00}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x40400c0) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82307201, &(0x7f0000000b00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, r1, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}]}, 0x34}}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x18, 0x1, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_SYNPROXY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000040}, 0x10800) 04:18:04 executing program 7: r0 = getpid() ptrace$poke(0x5, r0, &(0x7f0000000000), 0x2) ptrace$poke(0x5, r0, &(0x7f0000000040), 0x9) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x1, 0x10000023, 0x4, 0x8, 0x6, 0x10001, 0x1, 0x97e, 0xff}, 0x0) wait4(r0, &(0x7f00000000c0), 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x100000000, 0x100) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000140)={0x1, 0x8, 0x5, 0x0, 0x12, "a2917d908593e6a7"}) sched_setattr(r0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x67, 0xe1, 0x1000200000000, 0x8, 0x7, 0x2, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$P9_RREADDIR(r2, &(0x7f0000000200)={0xe4, 0x29, 0x2, {0x1, [{{0x4, 0x2, 0x3}, 0x3, 0x9, 0x7, './file0'}, {{0x40, 0x0, 0x1}, 0x3, 0x7, 0x7, './file0'}, {{0x1, 0x0, 0x6}, 0x7, 0x0, 0x7, './file0'}, {{0x20, 0x4}, 0x400, 0x9, 0x7, './file0'}, {{0x1, 0x3}, 0x20, 0x8, 0x7, './file0'}, {{0x10, 0x2, 0x8}, 0x8000000000, 0x0, 0x7, './file0'}, {{0x0, 0x3, 0x1}, 0x10000, 0xa2, 0x7, './file0'}]}}, 0xe4) r3 = syz_open_dev$mouse(&(0x7f0000000300), 0xffffffff, 0x1090c0) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0xe, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x400c0c5) r4 = getpid() wait4(r4, &(0x7f0000000440), 0x4, &(0x7f0000000480)) process_vm_writev(r4, &(0x7f0000000600)=[{&(0x7f0000000540)=""/63, 0x3f}, {&(0x7f0000000580)=""/83, 0x53}], 0x2, &(0x7f0000000780)=[{&(0x7f0000000640)=""/111, 0x6f}, {&(0x7f00000006c0)=""/162, 0xa2}], 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f00000007c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$P9_RREADDIR(r3, &(0x7f0000000a00)={0x4f, 0x29, 0x1, {0x40, [{{0x10, 0x3, 0x4}, 0xffffffff, 0x3, 0x7, './file0'}, {{0x10, 0x0, 0x2}, 0xd0, 0x68, 0xd, './file0/file0'}]}}, 0x4f) write$cgroup_int(r1, &(0x7f0000000a80)=0xffffffffffffffbc, 0x12) waitid(0x0, r4, 0x0, 0x4, &(0x7f0000000ac0)) getuid() 04:18:04 executing program 2: r0 = getpgrp(0x0) waitid(0x3, r0, &(0x7f0000000000), 0x1, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) waitid(0x1, r0, &(0x7f0000000140), 0x1, &(0x7f00000001c0)) getpid() r1 = getpgrp(r0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000280)={r1}) syz_open_dev$usbmon(&(0x7f00000002c0), 0x100, 0x111002) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x4040800) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="8d4cc7159281"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8044}, 0x860) open$dir(&(0x7f0000000540)='.\x00', 0x42000, 0x84) tkill(0xffffffffffffffff, 0x2d) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000580)={0xc5, 0x29, 0x1, {0x3ff, [{{0x10, 0x4, 0x3}, 0x6, 0x4, 0x7, './file0'}, {{0x4, 0x2}, 0x1, 0x80, 0x7, './file0'}, {{0x20, 0x4, 0x6}, 0x7f, 0x7, 0x7, './file0'}, {{0x20, 0x3, 0x6}, 0x7, 0x7, 0x7, './file0'}, {{0x8, 0x3, 0x5}, 0x10001, 0x8, 0x7, './file0'}, {{0x8, 0x1, 0x6}, 0x8000, 0x2, 0x7, './file0'}]}}, 0xc5) r2 = getpid() r3 = getpid() tgkill(r2, r3, 0xd) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs2/binder0\x00', 0x802, 0x0) getpid() 04:18:23 executing program 6: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x800, 0x20080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @random="844e53aa344e"}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10044040}, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xbd}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x800}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4000094) r3 = syz_open_dev$hiddev(&(0x7f0000000340), 0xc7, 0x430900) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f0000000380)={0x3, 0x200, 0x7}) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f00000003c0)={0x1, 0x2, 0xaec}) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f0000000400)={0x2, 0x1, 0x10000, 0x100, 0xfffffff7, 0x7fff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$HIDIOCGREPORTINFO(r3, 0xc00c4809, &(0x7f0000000580)={0x3, 0x2, 0x7}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc275}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) getsockname$packet(r0, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000840)=0x14) sendto$packet(r0, &(0x7f0000000740)="eac34db01a69cd3a024d532780f5b07efdf33f90c9f1c368e67520825400bb049aac7fb2bcbf34a47fc4ca855316c535c5fe88511b7f4d5332dc470dc306b78e1513c6e0727972b0479220530201318bdce4e5b1f0591ceaea23096858d25774b0900091e5614305a9aec3f6ce6e291c3484d4c583d7fc62654422b726788207dc7112f539eda1f7828a34fe58ac14", 0x8f, 0x48000, &(0x7f0000000880)={0x11, 0x0, r6, 0x1, 0xbb, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f00000008c0)={0x3, 0x1, 0x5}) sendto$packet(r0, &(0x7f0000000900)="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", 0x1000, 0x80, &(0x7f0000001900)={0x11, 0xf6, r6, 0x1, 0x92, 0x6, @remote}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001940)={0x2, 0x6}, 0x4) 04:18:23 executing program 0: r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x70000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r1, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x68}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x22}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x401}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r2 = syz_open_dev$usbmon(&(0x7f0000000400), 0xb2, 0x80000) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) io_setup(0x0, &(0x7f0000000440)=0x0) io_cancel(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x4, r2, &(0x7f0000000480)="b900dd845382dea2338d268e3b9eb268376ab5", 0x13, 0x1, 0x0, 0x3}, &(0x7f0000000500)) r4 = syz_open_dev$mouse(&(0x7f0000000540), 0x8, 0x244100) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40885}, 0x10) socketpair(0x27, 0x5, 0xffff, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004082) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xac}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffd}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r8 = socket(0x27, 0xe8e817c5a7242f21, 0x2) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3fc00}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x40400c0) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82307201, &(0x7f0000000b00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, r1, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}]}, 0x34}}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x18, 0x1, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_SYNPROXY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000040}, 0x10800) 04:18:23 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x699c1) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000100)) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x10002, 0x51, 0x4}, 0x18) io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x9570, r3, &(0x7f00000001c0)="b78a4f74d3605bd30f56252ec34d7a2051325a9ba1d8705462081b5ff3ae4e6bbf161eafe219c8ba34fb15cebf3247b70cb7db491cc2a5bd44694f5943b59b3b2b28052dfd3949c97f24bbb59903e08d2cb73eeaad2938d7e1ff4e26a3aa1ddd667b16b34ecff5174b1e11735cfb4b47e2bf8e8edf1e2b947ce2d939985732f87253049b15d4f3", 0x87, 0x80}, &(0x7f00000002c0)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000300)) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000340)=0x8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x1, r1, &(0x7f00000003c0)="931959d40ea24cc557c326dad574daa2a13a434bf5b6f60b8de1679e9c2f94c000f879407a5268acc5f63d2bbe3ecfbf43235f1f6ee22f55a9b3704c29", 0x3d, 0x9, 0x0, 0x2, r1}]) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000480)) setxattr$trusted_overlay_origin(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540), 0x2, 0x3) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x814) r6 = syz_open_dev$usbmon(&(0x7f00000006c0), 0x40, 0x200) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000740)={&(0x7f0000000700)=[0x0, 0x0, 0x0], 0x3, 0x40}) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000007c0)) 04:18:23 executing program 7: r0 = getpid() ptrace$poke(0x5, r0, &(0x7f0000000000), 0x2) ptrace$poke(0x5, r0, &(0x7f0000000040), 0x9) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x1, 0x10000023, 0x4, 0x8, 0x6, 0x10001, 0x1, 0x97e, 0xff}, 0x0) wait4(r0, &(0x7f00000000c0), 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x100000000, 0x100) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000140)={0x1, 0x8, 0x5, 0x0, 0x12, "a2917d908593e6a7"}) sched_setattr(r0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x67, 0xe1, 0x1000200000000, 0x8, 0x7, 0x2, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$P9_RREADDIR(r2, &(0x7f0000000200)={0xe4, 0x29, 0x2, {0x1, [{{0x4, 0x2, 0x3}, 0x3, 0x9, 0x7, './file0'}, {{0x40, 0x0, 0x1}, 0x3, 0x7, 0x7, './file0'}, {{0x1, 0x0, 0x6}, 0x7, 0x0, 0x7, './file0'}, {{0x20, 0x4}, 0x400, 0x9, 0x7, './file0'}, {{0x1, 0x3}, 0x20, 0x8, 0x7, './file0'}, {{0x10, 0x2, 0x8}, 0x8000000000, 0x0, 0x7, './file0'}, {{0x0, 0x3, 0x1}, 0x10000, 0xa2, 0x7, './file0'}]}}, 0xe4) r3 = syz_open_dev$mouse(&(0x7f0000000300), 0xffffffff, 0x1090c0) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0xe, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x400c0c5) r4 = getpid() wait4(r4, &(0x7f0000000440), 0x4, &(0x7f0000000480)) process_vm_writev(r4, &(0x7f0000000600)=[{&(0x7f0000000540)=""/63, 0x3f}, {&(0x7f0000000580)=""/83, 0x53}], 0x2, &(0x7f0000000780)=[{&(0x7f0000000640)=""/111, 0x6f}, {&(0x7f00000006c0)=""/162, 0xa2}], 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f00000007c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$P9_RREADDIR(r3, &(0x7f0000000a00)={0x4f, 0x29, 0x1, {0x40, [{{0x10, 0x3, 0x4}, 0xffffffff, 0x3, 0x7, './file0'}, {{0x10, 0x0, 0x2}, 0xd0, 0x68, 0xd, './file0/file0'}]}}, 0x4f) write$cgroup_int(r1, &(0x7f0000000a80)=0xffffffffffffffbc, 0x12) waitid(0x0, r4, 0x0, 0x4, &(0x7f0000000ac0)) getuid() 04:18:23 executing program 2: r0 = getpgrp(0x0) waitid(0x3, r0, &(0x7f0000000000), 0x1, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) waitid(0x1, r0, &(0x7f0000000140), 0x1, &(0x7f00000001c0)) getpid() r1 = getpgrp(r0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000280)={r1}) syz_open_dev$usbmon(&(0x7f00000002c0), 0x100, 0x111002) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x4040800) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="8d4cc7159281"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8044}, 0x860) open$dir(&(0x7f0000000540)='.\x00', 0x42000, 0x84) tkill(0xffffffffffffffff, 0x2d) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000580)={0xc5, 0x29, 0x1, {0x3ff, [{{0x10, 0x4, 0x3}, 0x6, 0x4, 0x7, './file0'}, {{0x4, 0x2}, 0x1, 0x80, 0x7, './file0'}, {{0x20, 0x4, 0x6}, 0x7f, 0x7, 0x7, './file0'}, {{0x20, 0x3, 0x6}, 0x7, 0x7, 0x7, './file0'}, {{0x8, 0x3, 0x5}, 0x10001, 0x8, 0x7, './file0'}, {{0x8, 0x1, 0x6}, 0x8000, 0x2, 0x7, './file0'}]}}, 0xc5) r2 = getpid() r3 = getpid() tgkill(r2, r3, 0xd) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs2/binder0\x00', 0x802, 0x0) 04:18:23 executing program 5: sched_yield() sched_yield() r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9f6, 0x80200) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) prctl$PR_SVE_GET_VL(0x33, 0x1cfa4) sched_yield() ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000280)) sched_yield() ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f00000002c0)={0x3, 0x1, 0x7b8, 0x8, 0x5, 0x4}) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x8010, r0, 0x9) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000340)='\'^\'-[\\\x00', &(0x7f0000000380)=':#{%%\'%:$(],\x00', &(0x7f00000003c0)='@-&\x00'], &(0x7f0000000640)=[&(0x7f0000000440)='/dev/usbmon#\x00', &(0x7f0000000480)='/dev/usbmon#\x00', &(0x7f00000004c0)='/dev/usbmon#\x00', &(0x7f0000000500)='/dev/usbmon#\x00', &(0x7f0000000540)='/dev/usbmon#\x00', &(0x7f0000000580)='/dev/usbmon#\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='/dev/usbmon#\x00']) prctl$PR_SVE_GET_VL(0x33, 0x2b4c) prctl$PR_SVE_GET_VL(0x33, 0x172ca) socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r2, 0x800, 0x0, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000a80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x1ac, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x9c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_ID={0x6c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1ff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x300}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffa}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x20, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xc16}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_SEC_DEVKEY={0xbc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffffe1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x8001}, 0x4) 04:18:23 executing program 3: sendto(0xffffffffffffffff, &(0x7f0000000000)="3698d5e302bf1832beca91bb33799cbeaf3ac85588bb506c9a0efc482430ef117fa3c43c93d7f3a8a39c0505f5a3608345c409d0c1f887334af5536f83a13338ad7f758f24d27771bb3ee5e21b84eec0854d21", 0x53, 0x800, &(0x7f0000000080)=@phonet={0x23, 0x7, 0xa0, 0x7}, 0x80) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="cecb86f85e88034e777c98b24e375cdad7603c65bd0d754100d663ef0b93d3468128c479e19fa8591590f033713970725769ad169dfa55e216c791aa875db3b1edd57c30d7187c58258d", 0x4a, 0x4000, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) sendto(r0, &(0x7f0000000300)="a29661fd7e2e04bc02ec888c59646191c740403d35c849c0d563fd8ff6f84257bf4263c9f6bb53e9bed24cf9a4aed9b6e013ed00ecb258fb3a1dfbe0bffed68302c006cecf", 0x45, 0x80, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x400c804) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40004) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000081) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x87ac}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x14) r2 = getpgrp(0x0) sched_setattr(r2, &(0x7f0000000800)={0x38, 0x1, 0x2, 0x7, 0x7fffffff, 0x400, 0x1, 0x5, 0x6, 0x80000000}, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000840), 0x9, 0x100) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x40000) clock_nanosleep(0x3, 0x0, &(0x7f0000000a00)={0x77359400}, &(0x7f0000000a40)) syz_open_dev$mouse(&(0x7f0000000a80), 0x7, 0x10000) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000ac0)=@req3={0x3, 0x4, 0x8, 0x1, 0x8, 0x8, 0xffff8000}, 0x1c) 04:18:23 executing program 4: sched_setattr(0xffffffffffffffff, &(0x7f0000000000)={0x38, 0x1, 0x18, 0x81, 0x5, 0x0, 0x0, 0x1f, 0x6, 0x80}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000040)={0x38, 0x5, 0x73, 0x1, 0x3, 0x6, 0x9, 0x8, 0xffffff84, 0xfa}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000080)={0x38, 0x5, 0x40, 0xae22, 0x8, 0x4, 0xb268, 0x3, 0xff, 0x3}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x10000040, 0x8000, 0x2, 0x8, 0x0, 0x0, 0x8000, 0x1}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x2, 0xe, 0x7, 0x82, 0x100000000, 0x7ff, 0x8000000000000000, 0x3}, 0x0) getpid() r0 = getpid() sched_setattr(r0, &(0x7f0000000140)={0x38, 0x3, 0x14, 0x6ca1c65c, 0x1, 0x3, 0x2, 0x6d8, 0x40, 0x100}, 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x8000, 0x50) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x3, 0x0, 0x4, 0x962, 0x3, 0x8, 0x10001, 0x7, 0x1}, 0x0) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000280)=""/155) setpgid(r3, r3) sched_setattr(r3, &(0x7f0000000340)={0x38, 0x3, 0x10000001, 0x9, 0x7, 0x2, 0x5, 0x3f, 0x3ff, 0x1966bb89}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4200080}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x8, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x17759) sched_setattr(0xffffffffffffffff, &(0x7f0000000480)={0x38, 0x6, 0x1, 0x2f, 0x400, 0xffffffff, 0x0, 0x8000, 0x80000001}, 0x0) 04:18:23 executing program 2: r0 = getpgrp(0x0) waitid(0x3, r0, &(0x7f0000000000), 0x1, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) waitid(0x1, r0, &(0x7f0000000140), 0x1, &(0x7f00000001c0)) getpid() r1 = getpgrp(r0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000280)={r1}) syz_open_dev$usbmon(&(0x7f00000002c0), 0x100, 0x111002) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x4040800) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="8d4cc7159281"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8044}, 0x860) open$dir(&(0x7f0000000540)='.\x00', 0x42000, 0x84) tkill(0xffffffffffffffff, 0x2d) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000580)={0xc5, 0x29, 0x1, {0x3ff, [{{0x10, 0x4, 0x3}, 0x6, 0x4, 0x7, './file0'}, {{0x4, 0x2}, 0x1, 0x80, 0x7, './file0'}, {{0x20, 0x4, 0x6}, 0x7f, 0x7, 0x7, './file0'}, {{0x20, 0x3, 0x6}, 0x7, 0x7, 0x7, './file0'}, {{0x8, 0x3, 0x5}, 0x10001, 0x8, 0x7, './file0'}, {{0x8, 0x1, 0x6}, 0x8000, 0x2, 0x7, './file0'}]}}, 0xc5) r2 = getpid() r3 = getpid() tgkill(r2, r3, 0xd) 04:18:24 executing program 7: r0 = getpid() ptrace$poke(0x5, r0, &(0x7f0000000000), 0x2) ptrace$poke(0x5, r0, &(0x7f0000000040), 0x9) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x1, 0x10000023, 0x4, 0x8, 0x6, 0x10001, 0x1, 0x97e, 0xff}, 0x0) wait4(r0, &(0x7f00000000c0), 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x100000000, 0x100) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000140)={0x1, 0x8, 0x5, 0x0, 0x12, "a2917d908593e6a7"}) sched_setattr(r0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x67, 0xe1, 0x1000200000000, 0x8, 0x7, 0x2, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$P9_RREADDIR(r2, &(0x7f0000000200)={0xe4, 0x29, 0x2, {0x1, [{{0x4, 0x2, 0x3}, 0x3, 0x9, 0x7, './file0'}, {{0x40, 0x0, 0x1}, 0x3, 0x7, 0x7, './file0'}, {{0x1, 0x0, 0x6}, 0x7, 0x0, 0x7, './file0'}, {{0x20, 0x4}, 0x400, 0x9, 0x7, './file0'}, {{0x1, 0x3}, 0x20, 0x8, 0x7, './file0'}, {{0x10, 0x2, 0x8}, 0x8000000000, 0x0, 0x7, './file0'}, {{0x0, 0x3, 0x1}, 0x10000, 0xa2, 0x7, './file0'}]}}, 0xe4) r3 = syz_open_dev$mouse(&(0x7f0000000300), 0xffffffff, 0x1090c0) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0xe, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x400c0c5) r4 = getpid() wait4(r4, &(0x7f0000000440), 0x4, &(0x7f0000000480)) process_vm_writev(r4, &(0x7f0000000600)=[{&(0x7f0000000540)=""/63, 0x3f}, {&(0x7f0000000580)=""/83, 0x53}], 0x2, &(0x7f0000000780)=[{&(0x7f0000000640)=""/111, 0x6f}, {&(0x7f00000006c0)=""/162, 0xa2}], 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f00000007c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$P9_RREADDIR(r3, &(0x7f0000000a00)={0x4f, 0x29, 0x1, {0x40, [{{0x10, 0x3, 0x4}, 0xffffffff, 0x3, 0x7, './file0'}, {{0x10, 0x0, 0x2}, 0xd0, 0x68, 0xd, './file0/file0'}]}}, 0x4f) write$cgroup_int(r1, &(0x7f0000000a80)=0xffffffffffffffbc, 0x12) waitid(0x0, r4, 0x0, 0x4, &(0x7f0000000ac0)) getuid() 04:18:24 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x699c1) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000100)) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x10002, 0x51, 0x4}, 0x18) io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x9570, r3, &(0x7f00000001c0)="b78a4f74d3605bd30f56252ec34d7a2051325a9ba1d8705462081b5ff3ae4e6bbf161eafe219c8ba34fb15cebf3247b70cb7db491cc2a5bd44694f5943b59b3b2b28052dfd3949c97f24bbb59903e08d2cb73eeaad2938d7e1ff4e26a3aa1ddd667b16b34ecff5174b1e11735cfb4b47e2bf8e8edf1e2b947ce2d939985732f87253049b15d4f3", 0x87, 0x80}, &(0x7f00000002c0)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000300)) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000340)=0x8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x1, r1, &(0x7f00000003c0)="931959d40ea24cc557c326dad574daa2a13a434bf5b6f60b8de1679e9c2f94c000f879407a5268acc5f63d2bbe3ecfbf43235f1f6ee22f55a9b3704c29", 0x3d, 0x9, 0x0, 0x2, r1}]) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000480)) setxattr$trusted_overlay_origin(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540), 0x2, 0x3) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x814) r6 = syz_open_dev$usbmon(&(0x7f00000006c0), 0x40, 0x200) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000740)={&(0x7f0000000700)=[0x0, 0x0, 0x0], 0x3, 0x40}) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000007c0)) 04:18:24 executing program 2: r0 = getpgrp(0x0) waitid(0x3, r0, &(0x7f0000000000), 0x1, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) waitid(0x1, r0, &(0x7f0000000140), 0x1, &(0x7f00000001c0)) getpid() r1 = getpgrp(r0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000280)={r1}) syz_open_dev$usbmon(&(0x7f00000002c0), 0x100, 0x111002) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x4040800) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="8d4cc7159281"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8044}, 0x860) open$dir(&(0x7f0000000540)='.\x00', 0x42000, 0x84) tkill(0xffffffffffffffff, 0x2d) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000580)={0xc5, 0x29, 0x1, {0x3ff, [{{0x10, 0x4, 0x3}, 0x6, 0x4, 0x7, './file0'}, {{0x4, 0x2}, 0x1, 0x80, 0x7, './file0'}, {{0x20, 0x4, 0x6}, 0x7f, 0x7, 0x7, './file0'}, {{0x20, 0x3, 0x6}, 0x7, 0x7, 0x7, './file0'}, {{0x8, 0x3, 0x5}, 0x10001, 0x8, 0x7, './file0'}, {{0x8, 0x1, 0x6}, 0x8000, 0x2, 0x7, './file0'}]}}, 0xc5) getpid() getpid() 04:18:24 executing program 0: r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x70000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r1, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x68}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x22}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x401}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r2 = syz_open_dev$usbmon(&(0x7f0000000400), 0xb2, 0x80000) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) io_setup(0x0, &(0x7f0000000440)=0x0) io_cancel(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x4, r2, &(0x7f0000000480)="b900dd845382dea2338d268e3b9eb268376ab5", 0x13, 0x1, 0x0, 0x3}, &(0x7f0000000500)) r4 = syz_open_dev$mouse(&(0x7f0000000540), 0x8, 0x244100) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40885}, 0x10) socketpair(0x27, 0x5, 0xffff, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004082) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xac}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffd}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r8 = socket(0x27, 0xe8e817c5a7242f21, 0x2) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3fc00}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x40400c0) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82307201, &(0x7f0000000b00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, r1, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}]}, 0x34}}, 0x10) 04:18:24 executing program 7: r0 = getpid() ptrace$poke(0x5, r0, &(0x7f0000000000), 0x2) ptrace$poke(0x5, r0, &(0x7f0000000040), 0x9) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x1, 0x10000023, 0x4, 0x8, 0x6, 0x10001, 0x1, 0x97e, 0xff}, 0x0) wait4(r0, &(0x7f00000000c0), 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x100000000, 0x100) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000140)={0x1, 0x8, 0x5, 0x0, 0x12, "a2917d908593e6a7"}) sched_setattr(r0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x67, 0xe1, 0x1000200000000, 0x8, 0x7, 0x2, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$P9_RREADDIR(r2, &(0x7f0000000200)={0xe4, 0x29, 0x2, {0x1, [{{0x4, 0x2, 0x3}, 0x3, 0x9, 0x7, './file0'}, {{0x40, 0x0, 0x1}, 0x3, 0x7, 0x7, './file0'}, {{0x1, 0x0, 0x6}, 0x7, 0x0, 0x7, './file0'}, {{0x20, 0x4}, 0x400, 0x9, 0x7, './file0'}, {{0x1, 0x3}, 0x20, 0x8, 0x7, './file0'}, {{0x10, 0x2, 0x8}, 0x8000000000, 0x0, 0x7, './file0'}, {{0x0, 0x3, 0x1}, 0x10000, 0xa2, 0x7, './file0'}]}}, 0xe4) r3 = syz_open_dev$mouse(&(0x7f0000000300), 0xffffffff, 0x1090c0) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0xe, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x400c0c5) r4 = getpid() wait4(r4, &(0x7f0000000440), 0x4, &(0x7f0000000480)) process_vm_writev(r4, &(0x7f0000000600)=[{&(0x7f0000000540)=""/63, 0x3f}, {&(0x7f0000000580)=""/83, 0x53}], 0x2, &(0x7f0000000780)=[{&(0x7f0000000640)=""/111, 0x6f}, {&(0x7f00000006c0)=""/162, 0xa2}], 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f00000007c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$P9_RREADDIR(r3, &(0x7f0000000a00)={0x4f, 0x29, 0x1, {0x40, [{{0x10, 0x3, 0x4}, 0xffffffff, 0x3, 0x7, './file0'}, {{0x10, 0x0, 0x2}, 0xd0, 0x68, 0xd, './file0/file0'}]}}, 0x4f) write$cgroup_int(r1, &(0x7f0000000a80)=0xffffffffffffffbc, 0x12) getuid() 04:18:24 executing program 4: sched_setattr(0xffffffffffffffff, &(0x7f0000000000)={0x38, 0x1, 0x18, 0x81, 0x5, 0x0, 0x0, 0x1f, 0x6, 0x80}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000040)={0x38, 0x5, 0x73, 0x1, 0x3, 0x6, 0x9, 0x8, 0xffffff84, 0xfa}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000080)={0x38, 0x5, 0x40, 0xae22, 0x8, 0x4, 0xb268, 0x3, 0xff, 0x3}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x10000040, 0x8000, 0x2, 0x8, 0x0, 0x0, 0x8000, 0x1}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x2, 0xe, 0x7, 0x82, 0x100000000, 0x7ff, 0x8000000000000000, 0x3}, 0x0) getpid() r0 = getpid() sched_setattr(r0, &(0x7f0000000140)={0x38, 0x3, 0x14, 0x6ca1c65c, 0x1, 0x3, 0x2, 0x6d8, 0x40, 0x100}, 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x8000, 0x50) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x3, 0x0, 0x4, 0x962, 0x3, 0x8, 0x10001, 0x7, 0x1}, 0x0) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000280)=""/155) setpgid(r3, r3) sched_setattr(r3, &(0x7f0000000340)={0x38, 0x3, 0x10000001, 0x9, 0x7, 0x2, 0x5, 0x3f, 0x3ff, 0x1966bb89}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4200080}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x8, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x17759) sched_setattr(0xffffffffffffffff, &(0x7f0000000480)={0x38, 0x6, 0x1, 0x2f, 0x400, 0xffffffff, 0x0, 0x8000, 0x80000001}, 0x0) 04:18:24 executing program 5: sched_yield() sched_yield() r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9f6, 0x80200) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) prctl$PR_SVE_GET_VL(0x33, 0x1cfa4) sched_yield() ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000280)) sched_yield() ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f00000002c0)={0x3, 0x1, 0x7b8, 0x8, 0x5, 0x4}) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x8010, r0, 0x9) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000340)='\'^\'-[\\\x00', &(0x7f0000000380)=':#{%%\'%:$(],\x00', &(0x7f00000003c0)='@-&\x00'], &(0x7f0000000640)=[&(0x7f0000000440)='/dev/usbmon#\x00', &(0x7f0000000480)='/dev/usbmon#\x00', &(0x7f00000004c0)='/dev/usbmon#\x00', &(0x7f0000000500)='/dev/usbmon#\x00', &(0x7f0000000540)='/dev/usbmon#\x00', &(0x7f0000000580)='/dev/usbmon#\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='/dev/usbmon#\x00']) prctl$PR_SVE_GET_VL(0x33, 0x2b4c) prctl$PR_SVE_GET_VL(0x33, 0x172ca) socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r2, 0x800, 0x0, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000a80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x1ac, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x9c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_ID={0x6c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1ff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x300}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffa}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x20, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xc16}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_SEC_DEVKEY={0xbc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffffe1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x8001}, 0x4) 04:18:37 executing program 5: sched_yield() sched_yield() r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9f6, 0x80200) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) prctl$PR_SVE_GET_VL(0x33, 0x1cfa4) sched_yield() ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000280)) sched_yield() ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f00000002c0)={0x3, 0x1, 0x7b8, 0x8, 0x5, 0x4}) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x8010, r0, 0x9) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000340)='\'^\'-[\\\x00', &(0x7f0000000380)=':#{%%\'%:$(],\x00', &(0x7f00000003c0)='@-&\x00'], &(0x7f0000000640)=[&(0x7f0000000440)='/dev/usbmon#\x00', &(0x7f0000000480)='/dev/usbmon#\x00', &(0x7f00000004c0)='/dev/usbmon#\x00', &(0x7f0000000500)='/dev/usbmon#\x00', &(0x7f0000000540)='/dev/usbmon#\x00', &(0x7f0000000580)='/dev/usbmon#\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='/dev/usbmon#\x00']) prctl$PR_SVE_GET_VL(0x33, 0x2b4c) prctl$PR_SVE_GET_VL(0x33, 0x172ca) socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r2, 0x800, 0x0, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000a80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x1ac, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x9c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_ID={0x6c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1ff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x300}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffa}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x20, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xc16}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_SEC_DEVKEY={0xbc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffffe1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x8001}, 0x4) 04:18:37 executing program 6: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x800, 0x20080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @random="844e53aa344e"}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10044040}, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xbd}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x800}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4000094) r3 = syz_open_dev$hiddev(&(0x7f0000000340), 0xc7, 0x430900) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f0000000380)={0x3, 0x200, 0x7}) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f00000003c0)={0x1, 0x2, 0xaec}) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f0000000400)={0x2, 0x1, 0x10000, 0x100, 0xfffffff7, 0x7fff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$HIDIOCGREPORTINFO(r3, 0xc00c4809, &(0x7f0000000580)={0x3, 0x2, 0x7}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc275}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) getsockname$packet(r0, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000840)=0x14) sendto$packet(r0, &(0x7f0000000740)="eac34db01a69cd3a024d532780f5b07efdf33f90c9f1c368e67520825400bb049aac7fb2bcbf34a47fc4ca855316c535c5fe88511b7f4d5332dc470dc306b78e1513c6e0727972b0479220530201318bdce4e5b1f0591ceaea23096858d25774b0900091e5614305a9aec3f6ce6e291c3484d4c583d7fc62654422b726788207dc7112f539eda1f7828a34fe58ac14", 0x8f, 0x48000, &(0x7f0000000880)={0x11, 0x0, r6, 0x1, 0xbb, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f00000008c0)={0x3, 0x1, 0x5}) sendto$packet(r0, &(0x7f0000000900)="ab5f28e563621c2a9ccdb5cab4195ff539dbc95ef57938141ab17de93c3887e06800398dd2715523548f23f0f959b52ef54cc46cdbc42157d581592c5b3a08adf4a1b167c88678552b244bcb94baae11c52f9ffad468a0052b22e4631737ad30fa52a8ac7c65908e7bb28726518ebfff5d1bc24294874737b17b96261b24119f7d1903a127af2ebd0cf55245566fb5aded13a3da53c06da21c6e83c0b4660730ff87f1cb469843abbdfdf129f18f104a3aa2090559e1f910c9258ae6012f2e24c8eae5433cda0ffb113c8ca5d09a17f5fbbe32135bf940394191a4f2143af68a951910442f8d7d32f2b8a7b9bc7b152768285319d592cb05bbff82b6ad384a2231347bfd68636a9ade8b673eedca99a6a997b4f39902d0f9a498022e753d96bb2f4a78cbac35382e78eaca37f0ce60c0926e20c54c693294f36d9183a5b8b1102a254d63dacab983030b0769d539b170845390b7b778ef2acee20758270cd7327eddb1306a6bf8d1448ec26987f4eacb408715a8d2e468906c0f4a78664a1daac3abccddac61c2498404a2171ccca30f93bdaacc93ea1814332c77a745117450596cc55f9a8765ec67e7f3d6d77a9bcc2e87d90d4b93eb7688050bb52fa91d265e01837c7fcb9140a3e9788de832ba0a08ad9cd59d58c4f91e1ba5e477280fc786fc4f17749effeae7058772613d562b0f69de931b2cefe276156fce323e82f1997b1e8d0777894d90f0feda63c228ee71fcad2e5639788ff2885b7991c5bc2c519754466d1e1d77a7a0379b52aabefa3951dea3ce3ce3fb062512e97a1287279a8849a575423d288aecdd72ff893e3abe923b62a6f73fa9b47dd642fe247a5dd0ad38f31ad4a28cf784acbb728701100d473ca6a9a2801283c178ffa10fd552cc7a15e7192808bd208f0043d21c7912f68717a7a1ceb997cbde31fe52247a97b0442472520b4044397ef80c61f323397ff9669ac73b8c900f4b4a0a0e85aa951fd7345672db2266280f2b5c43efa97a4121441704c60342bb3a0f94b2f9d237240c4fc385cb15d0ef7160fb542dd5fcdb29d6a3d7e2401b596bc53bd8686d56b30135242b5fd7ade0683e615d4289bc94a380776e008852731bd6ff0a92e6f0d95640e90866358acb7e2e2c14a8bbb8ea83aaaf40ad575f084b924bd64835531349960e304c6fd6b4aedfce648f3af050eea11e374048f9280ca38aaa4aac706f3a90a4c610921e351cbcc40d98ca23f584a0d2f6ebcd4625fab221f90942315b8513e9dce2d1f9fd4df868cd01d067c0ec4061514bbcfb2bb113a5fc832ca43843ebf2715a51bda2d24706370494ffeb40fcdcea42360f2641d71f183925a1173129d106c00cd01fd1b4d2fff851eb1d357f063bdb6b8e76728791a760996d250dfef079c61087465e512c61550865f4ced8e2ad9de049fc6718a60dc87e2f68a088712a3ccea7024c429db674359cde8c0e80b817d55fb2eb1d6d0a7b68e7bd17200043ff412b3ceba9bf31c49cef9e752cde41cd5f53a67163a655237041b43a9b1f4e3f983f648fbef3892c7344bdf1ddb13a202ee6eb247d110de780d36b6e7ba896c08ed9e926e7064cd2391d6c1c69e7dd3e9f84a790954e89c9c41cba49cb0df0146275e75c9604ccb7037c823928e225c0ddd71f0f37737a54296bef0a91b5a48f7346e70823132e3abeeb3774a691e9b104063b7915452ab16264ac233417b08dce2d93d2fd49a61a4a33e953d8d37486d3909297d055e1d44a1d66321d992e43998b1e76b659ad21738ff43db5a0bf335ddc65775ca350dbedb9aa19402aedeee11ac7f5747a993001fe28cf3b50acb7cddef34d575023610a547312e3805cda7efd6fdd48605db4f5aa09012f24c64641fc664c805bb804fcc1fbed38b1a9579e4fc5076db7d42a1f4b6a8bdd72028f5bf1ab2acb975cf7822645f215091112cd0f4e2985da5496a41576ece6e9a91e1301f4c025f19832c31274ac06724d13c96b03d5bdaaf74581afa065f90cbb48746bc079a86c4d010b16c61847592e94979286fede9c02b54479599128c8f5ed899c528a92ce5ddbab2e25c7186ca17bcf3922f83e22ddf4d457e94cf62b027dd4f42846f4f652e94ba5b8fd3cb4b5457fd0de8b009d57b13b0b09a6946ee5eb3ec43d311cb2dddac5acd3df2f26fa10f000aead7e93a7e5dbd8faa6f62a6d23fd075b9f148db3bfd2182f52a04110b887edafa71f5648744d278af3191e5cc869f470f76ff0c1f7211bb808f2a8ead7ce885bb778e1b1c069f18fd3cfe64e8aa09bb6ddad7a7f525a88ecf3fc08afd1375e3eedc8810b919460b35373cd20e6727ffb6c979055bc7e622c96ec29e8ea4a4fed9e7f57b535226188a18a473fad676fdc667c12cd688635e93b84484b5388d9fa7f6d3199c145c807a3ca82795d7b82b6030feb838388b0e7d43abf8984c673c23991dfa196f9174b8eaff6aa410076cab846c7eba2118ea1b55ae74064f2bb50bf4ac1ae5666cedfe1e06275931d9fdf15fe7af2801d2b159a5c38fe593126cd60444aed9cc5fd21797119d7ff172c7ac3f3a845094a87fc2fbda6b83c5190da59e9bba7fdf2bb6b082514c7e3491a847ffd002b9391b35aa78d4761f553886b26511d11358715596da8b2db47b33400b85bc8bd9e79130acffebdd430a568902a5747aa805082572743a8bf7daf2aab953debe316e6087396d4cfa89ee4e15d44ccf5444b6687645cbab3702ae7b09b6df9385bb1f61d4ec053349eddfc2c76491d503dedb4f1c0c7ae87d7a7453303c616c9291ce88bbb1dacdb94466dc9ac3bdd63822898ff9ccdbde3dd9c85bb33e72b2a1264a96dc45101fc0a74ac044c87623e0d6d51b1f49ac1162fb4cfb334f82c98c2ba6c2ce7273a0ff60c25a39dbeb2002f37fa76bc3e63522687f584b05f2fa22698caeac43ae61295a6393a24b8e6d19d196133d4f25ac0248c307ad6ce503ca4f3a3abb9a8bddb5a47b327a5841d55b2679e9b5aee1673329fb990b987d92ef7d7e15bf58993a3c3cc4862e17e4c03ae987774ba00fa6ce0d1370107a4b80b067d9880d5f7695460476a5ed1caec865f303d70fb8cb43097129354d8cc348eed65671e905604a58b3fb34368134fabf8c5a386f11ea7a2bf3f79b30924c49ca39776a0e4bccf5e580e058321cb48225abd7d9bdf2eebccc206c6693544cb3320008ac59589f7a6ce27ec7359b33fe06034c6310f4e9840aa71e3896ac89a30a694a33bec79e20d69b88dca32a12ac559088274cfb2a9b46d728fdba6adaa3584b8e7e14af7fdedd6ecfab7be423fd0381faf157973319154951d03f36b80d273aea802e82fda9b24164780392190fe920ac1828c990a326e77e6933da4ff10d5cf92b436b62714cc64c586f1fed2c6cbbcd402d566a26ba2daf8c226d527910df82073a378a7b2a83262115af05f5f09f9380488fb0c3137aa61efdecfcb1719f1e3981789d41525eb9aff7b29e946c3747bc08c3809e0ed3f73b4fbc3dc0c4972d9ad55f0db7cd264a709de616b6f1df41acdc828648fdb0738b1185eb72b3841c5f032b3fd946ba6e823ad02390f7f8788ee21503c68d1b6d888e053eb9a92575115f26283371ea79d5ad38819d71e5a8563039b00bab4afec9191496a54e242943d917b8e3efbda3b3b1784112c5e1cb784af08dbda895ba82e9fe96c5135e28d73667a703b050099698b55a98d3fc5609d9caa450a50f4ca7c7965ba52b9fe36a9aac7a8013e941a8452efa52f47cf454ff299084d9cc2e876e621a0f95e95a7993dbb793712dc151d7a0ca6c5ab6e2cf466fd38cb3ed8ac39e0aa2c0453aca4f2ac45d66679ebd10773fc247e7fb88c3e862dfc07b5df7c54875458e01da4cf714a20dbccad35a1553347c68aa5c0e693ae505cbc4e0965aeae966d72ecb675efc5327cc5d646660a7c05e5165b76b1c17ce6e495a6fefbc0f0e2902775e6a6184525f5c8a785f9409b30fee46035dd43339a054276975aa77e9724bd6f94fb6a20d3f958c8ba320d5dda6bc5115fdd736c7c485044c1437180e2b8312de8e14d0ea7aea90276ce01e2dfc9cd85fb139cc2ffbb1aace88a043226864f21e2004c167fb7aec2ddbffd1ea42b135b3b72065b547b1573cd70c131fc2529e72fb19046ef86de3a977aa6b925f1d9180dab210c6e4ccdcd30e00888fadf19745470142340995de28659e55b70a9be0f142f308bb77745de607f0fab730cfa4d126cc2f4ae42c96b7b666e535a1a239cf1a7a5d8ec8b7ea6a6f8c82a5bd9d383c534890c560204efb01bc09f0ef6766c25bafdebd163b470383544da471dfe083f0ec94a51fc0a8040fe76ead928539bf0a732504e06e3071a39f404783d485639e333330f16d7a71da13908ea0642b18962c4938562d45f016b4b6b1405a406d74f10276a11b4f62de5f174baf237b9b5d7029e4b0f805fdbfeaf54cd795c24d71106ff4537dac249425d8c4cfda5aaa74603e7163a6b5eae6f514689f80d55ef790482e99276f0ae098745432983459fb4619821ca103ae2c61990257726bba581119c7da952ce67996c5e31881edfd4f10dbe684ae952ac03d24b15c362bd46bed9f834b8b6daf9e4d2fe50a254ca93615f5cfdfcdf8b54f14d8ff45379b9438ae56051249e5abbc373d5d1208442afba9a87442141dd9beafb6acc12492310176743c138dca0423fa941fec59cb7947d95f74758b2eafd9585cb43ba45f86b62f1522c1ab418a8706c3cca03e2093dcd92838fcc64e10dcc4fd0765df2f8267927f70f4b381bc60ce750512b611bb898ccf60bffb7b3f2edd5d304e1681e5fcd1c289413b605591b9ae053b2da91011a44a00488ad721cf0c1f4b1096d3aa61166d7e16e032590bbcc2bb24e096c3362e581cb39d73834208a6afd75566b27ecc20847cbcd8609e4a8f959f2fc22cf4244115798553a586bcc92e481a901df21078d76170cc712aa217776291e9e304c192d73492b844aba16cf237a8a837b23a84fe2dc367705fbab7380cd6b8764649753ad1ff1ce3ac34c6eb4ea94d9b2c4dddb20a203c83681456c148b225e5341a31fbb07173c2051ea1c4df913ae245672433a10c42d506be8e0e6675637a0103adeddaac15a11719ac8169e86a83dc7d9e88694bb15fccd6c5dc6edc917b32464f95ac4bb70500ae62f6d4f33a12981e31ef31580f8b169d8affb587c59c5911e6b2f771ad03f4e1f131d9b091375344e54b6dc2fcb1356f9abfbf3bbf69c6ba4ec39b6ce0491db27e1315755e1bc438a4f927f30041e2594445d352e0b432a8b0d17c82ba885b9397672b617d333d5428948325a9f7db6f718908a2c5047e3091dc7e175bb3663f0aa6f847f0d1734cf02c0ea3ada8ed10059f8a7bf2a38ddbcca19f316193d1f8bd0eaa7891108760015fdffee5967a7217df6d3ca68cac08346250af4b0cb09cd5a2f7648681c2d39d7d772e11020f2503bbfa2c3a61083b27040199b191f9efadc335f209ac285708b027b057d1e84466be89be03662d84f1e0ac77157fff83838700f10da2f1b6825323764feb0fa4ce5f50a07c71ebf782a76a5ff7d8d37341b694151e8bbb6e44a86e390c340ac8aea16ffa446e007b7de201abd3c9863267009edebe26fc462b43872d19411792c780d93720d79893a954f493223f2f4f99925c5538dd960531f20cecd84c41f998c284d4818ee78764612f6a477903faba921fdc4d262aebaea8cca070677038fa3f979f1b270fdb59a3c97236efa183cfece4f12e717fae5", 0x1000, 0x80, &(0x7f0000001900)={0x11, 0xf6, r6, 0x1, 0x92, 0x6, @remote}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001940)={0x2, 0x6}, 0x4) 04:18:37 executing program 0: r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x70000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r1, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x68}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x22}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x401}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r2 = syz_open_dev$usbmon(&(0x7f0000000400), 0xb2, 0x80000) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) io_setup(0x0, &(0x7f0000000440)=0x0) io_cancel(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x4, r2, &(0x7f0000000480)="b900dd845382dea2338d268e3b9eb268376ab5", 0x13, 0x1, 0x0, 0x3}, &(0x7f0000000500)) r4 = syz_open_dev$mouse(&(0x7f0000000540), 0x8, 0x244100) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40885}, 0x10) socketpair(0x27, 0x5, 0xffff, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004082) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xac}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffd}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r8 = socket(0x27, 0xe8e817c5a7242f21, 0x2) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3fc00}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x40400c0) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82307201, &(0x7f0000000b00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 04:18:37 executing program 3: sendto(0xffffffffffffffff, &(0x7f0000000000)="3698d5e302bf1832beca91bb33799cbeaf3ac85588bb506c9a0efc482430ef117fa3c43c93d7f3a8a39c0505f5a3608345c409d0c1f887334af5536f83a13338ad7f758f24d27771bb3ee5e21b84eec0854d21", 0x53, 0x800, &(0x7f0000000080)=@phonet={0x23, 0x7, 0xa0, 0x7}, 0x80) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="cecb86f85e88034e777c98b24e375cdad7603c65bd0d754100d663ef0b93d3468128c479e19fa8591590f033713970725769ad169dfa55e216c791aa875db3b1edd57c30d7187c58258d", 0x4a, 0x4000, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) sendto(r0, &(0x7f0000000300)="a29661fd7e2e04bc02ec888c59646191c740403d35c849c0d563fd8ff6f84257bf4263c9f6bb53e9bed24cf9a4aed9b6e013ed00ecb258fb3a1dfbe0bffed68302c006cecf", 0x45, 0x80, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x400c804) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40004) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000081) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x87ac}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x14) r2 = getpgrp(0x0) sched_setattr(r2, &(0x7f0000000800)={0x38, 0x1, 0x2, 0x7, 0x7fffffff, 0x400, 0x1, 0x5, 0x6, 0x80000000}, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000840), 0x9, 0x100) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x40000) clock_nanosleep(0x3, 0x0, &(0x7f0000000a00)={0x77359400}, &(0x7f0000000a40)) syz_open_dev$mouse(&(0x7f0000000a80), 0x7, 0x10000) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000ac0)=@req3={0x3, 0x4, 0x8, 0x1, 0x8, 0x8, 0xffff8000}, 0x1c) 04:18:37 executing program 7: r0 = getpid() ptrace$poke(0x5, r0, &(0x7f0000000000), 0x2) ptrace$poke(0x5, r0, &(0x7f0000000040), 0x9) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x1, 0x10000023, 0x4, 0x8, 0x6, 0x10001, 0x1, 0x97e, 0xff}, 0x0) wait4(r0, &(0x7f00000000c0), 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x100000000, 0x100) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000140)={0x1, 0x8, 0x5, 0x0, 0x12, "a2917d908593e6a7"}) sched_setattr(r0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x67, 0xe1, 0x1000200000000, 0x8, 0x7, 0x2, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$P9_RREADDIR(r2, &(0x7f0000000200)={0xe4, 0x29, 0x2, {0x1, [{{0x4, 0x2, 0x3}, 0x3, 0x9, 0x7, './file0'}, {{0x40, 0x0, 0x1}, 0x3, 0x7, 0x7, './file0'}, {{0x1, 0x0, 0x6}, 0x7, 0x0, 0x7, './file0'}, {{0x20, 0x4}, 0x400, 0x9, 0x7, './file0'}, {{0x1, 0x3}, 0x20, 0x8, 0x7, './file0'}, {{0x10, 0x2, 0x8}, 0x8000000000, 0x0, 0x7, './file0'}, {{0x0, 0x3, 0x1}, 0x10000, 0xa2, 0x7, './file0'}]}}, 0xe4) r3 = syz_open_dev$mouse(&(0x7f0000000300), 0xffffffff, 0x1090c0) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0xe, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x400c0c5) r4 = getpid() wait4(r4, &(0x7f0000000440), 0x4, &(0x7f0000000480)) process_vm_writev(r4, &(0x7f0000000600)=[{&(0x7f0000000540)=""/63, 0x3f}, {&(0x7f0000000580)=""/83, 0x53}], 0x2, &(0x7f0000000780)=[{&(0x7f0000000640)=""/111, 0x6f}, {&(0x7f00000006c0)=""/162, 0xa2}], 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f00000007c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$P9_RREADDIR(r3, &(0x7f0000000a00)={0x4f, 0x29, 0x1, {0x40, [{{0x10, 0x3, 0x4}, 0xffffffff, 0x3, 0x7, './file0'}, {{0x10, 0x0, 0x2}, 0xd0, 0x68, 0xd, './file0/file0'}]}}, 0x4f) getuid() 04:18:37 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x699c1) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000100)) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x10002, 0x51, 0x4}, 0x18) io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x9570, r3, &(0x7f00000001c0)="b78a4f74d3605bd30f56252ec34d7a2051325a9ba1d8705462081b5ff3ae4e6bbf161eafe219c8ba34fb15cebf3247b70cb7db491cc2a5bd44694f5943b59b3b2b28052dfd3949c97f24bbb59903e08d2cb73eeaad2938d7e1ff4e26a3aa1ddd667b16b34ecff5174b1e11735cfb4b47e2bf8e8edf1e2b947ce2d939985732f87253049b15d4f3", 0x87, 0x80}, &(0x7f00000002c0)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000300)) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000340)=0x8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x1, r1, &(0x7f00000003c0)="931959d40ea24cc557c326dad574daa2a13a434bf5b6f60b8de1679e9c2f94c000f879407a5268acc5f63d2bbe3ecfbf43235f1f6ee22f55a9b3704c29", 0x3d, 0x9, 0x0, 0x2, r1}]) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000480)) setxattr$trusted_overlay_origin(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540), 0x2, 0x3) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x814) r6 = syz_open_dev$usbmon(&(0x7f00000006c0), 0x40, 0x200) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000740)={&(0x7f0000000700)=[0x0, 0x0, 0x0], 0x3, 0x40}) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000007c0)) 04:18:37 executing program 2: r0 = getpgrp(0x0) waitid(0x3, r0, &(0x7f0000000000), 0x1, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) waitid(0x1, r0, &(0x7f0000000140), 0x1, &(0x7f00000001c0)) getpid() r1 = getpgrp(r0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000280)={r1}) syz_open_dev$usbmon(&(0x7f00000002c0), 0x100, 0x111002) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x4040800) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="8d4cc7159281"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8044}, 0x860) open$dir(&(0x7f0000000540)='.\x00', 0x42000, 0x84) tkill(0xffffffffffffffff, 0x2d) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000580)={0xc5, 0x29, 0x1, {0x3ff, [{{0x10, 0x4, 0x3}, 0x6, 0x4, 0x7, './file0'}, {{0x4, 0x2}, 0x1, 0x80, 0x7, './file0'}, {{0x20, 0x4, 0x6}, 0x7f, 0x7, 0x7, './file0'}, {{0x20, 0x3, 0x6}, 0x7, 0x7, 0x7, './file0'}, {{0x8, 0x3, 0x5}, 0x10001, 0x8, 0x7, './file0'}, {{0x8, 0x1, 0x6}, 0x8000, 0x2, 0x7, './file0'}]}}, 0xc5) getpid() 04:18:37 executing program 4: sched_setattr(0xffffffffffffffff, &(0x7f0000000000)={0x38, 0x1, 0x18, 0x81, 0x5, 0x0, 0x0, 0x1f, 0x6, 0x80}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000040)={0x38, 0x5, 0x73, 0x1, 0x3, 0x6, 0x9, 0x8, 0xffffff84, 0xfa}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000080)={0x38, 0x5, 0x40, 0xae22, 0x8, 0x4, 0xb268, 0x3, 0xff, 0x3}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x10000040, 0x8000, 0x2, 0x8, 0x0, 0x0, 0x8000, 0x1}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x2, 0xe, 0x7, 0x82, 0x100000000, 0x7ff, 0x8000000000000000, 0x3}, 0x0) getpid() r0 = getpid() sched_setattr(r0, &(0x7f0000000140)={0x38, 0x3, 0x14, 0x6ca1c65c, 0x1, 0x3, 0x2, 0x6d8, 0x40, 0x100}, 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x8000, 0x50) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x3, 0x0, 0x4, 0x962, 0x3, 0x8, 0x10001, 0x7, 0x1}, 0x0) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000280)=""/155) setpgid(r3, r3) sched_setattr(r3, &(0x7f0000000340)={0x38, 0x3, 0x10000001, 0x9, 0x7, 0x2, 0x5, 0x3f, 0x3ff, 0x1966bb89}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4200080}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x8, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x17759) sched_setattr(0xffffffffffffffff, &(0x7f0000000480)={0x38, 0x6, 0x1, 0x2f, 0x400, 0xffffffff, 0x0, 0x8000, 0x80000001}, 0x0) 04:18:37 executing program 2: r0 = getpgrp(0x0) waitid(0x3, r0, &(0x7f0000000000), 0x1, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) waitid(0x1, r0, &(0x7f0000000140), 0x1, &(0x7f00000001c0)) getpid() r1 = getpgrp(r0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000280)={r1}) syz_open_dev$usbmon(&(0x7f00000002c0), 0x100, 0x111002) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x4040800) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="8d4cc7159281"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8044}, 0x860) open$dir(&(0x7f0000000540)='.\x00', 0x42000, 0x84) tkill(0xffffffffffffffff, 0x2d) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000580)={0xc5, 0x29, 0x1, {0x3ff, [{{0x10, 0x4, 0x3}, 0x6, 0x4, 0x7, './file0'}, {{0x4, 0x2}, 0x1, 0x80, 0x7, './file0'}, {{0x20, 0x4, 0x6}, 0x7f, 0x7, 0x7, './file0'}, {{0x20, 0x3, 0x6}, 0x7, 0x7, 0x7, './file0'}, {{0x8, 0x3, 0x5}, 0x10001, 0x8, 0x7, './file0'}, {{0x8, 0x1, 0x6}, 0x8000, 0x2, 0x7, './file0'}]}}, 0xc5) 04:18:37 executing program 2: r0 = getpgrp(0x0) waitid(0x3, r0, &(0x7f0000000000), 0x1, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) waitid(0x1, r0, &(0x7f0000000140), 0x1, &(0x7f00000001c0)) getpid() r1 = getpgrp(r0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000280)={r1}) syz_open_dev$usbmon(&(0x7f00000002c0), 0x100, 0x111002) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x4040800) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="8d4cc7159281"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8044}, 0x860) open$dir(&(0x7f0000000540)='.\x00', 0x42000, 0x84) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000580)={0xc5, 0x29, 0x1, {0x3ff, [{{0x10, 0x4, 0x3}, 0x6, 0x4, 0x7, './file0'}, {{0x4, 0x2}, 0x1, 0x80, 0x7, './file0'}, {{0x20, 0x4, 0x6}, 0x7f, 0x7, 0x7, './file0'}, {{0x20, 0x3, 0x6}, 0x7, 0x7, 0x7, './file0'}, {{0x8, 0x3, 0x5}, 0x10001, 0x8, 0x7, './file0'}, {{0x8, 0x1, 0x6}, 0x8000, 0x2, 0x7, './file0'}]}}, 0xc5) 04:18:38 executing program 4: sched_setattr(0xffffffffffffffff, &(0x7f0000000000)={0x38, 0x1, 0x18, 0x81, 0x5, 0x0, 0x0, 0x1f, 0x6, 0x80}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000040)={0x38, 0x5, 0x73, 0x1, 0x3, 0x6, 0x9, 0x8, 0xffffff84, 0xfa}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000080)={0x38, 0x5, 0x40, 0xae22, 0x8, 0x4, 0xb268, 0x3, 0xff, 0x3}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x10000040, 0x8000, 0x2, 0x8, 0x0, 0x0, 0x8000, 0x1}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x2, 0xe, 0x7, 0x82, 0x100000000, 0x7ff, 0x8000000000000000, 0x3}, 0x0) getpid() r0 = getpid() sched_setattr(r0, &(0x7f0000000140)={0x38, 0x3, 0x14, 0x6ca1c65c, 0x1, 0x3, 0x2, 0x6d8, 0x40, 0x100}, 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x8000, 0x50) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x3, 0x0, 0x4, 0x962, 0x3, 0x8, 0x10001, 0x7, 0x1}, 0x0) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000280)=""/155) setpgid(r3, r3) sched_setattr(r3, &(0x7f0000000340)={0x38, 0x3, 0x10000001, 0x9, 0x7, 0x2, 0x5, 0x3f, 0x3ff, 0x1966bb89}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4200080}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x8, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x17759) 04:18:38 executing program 7: r0 = getpid() ptrace$poke(0x5, r0, &(0x7f0000000000), 0x2) ptrace$poke(0x5, r0, &(0x7f0000000040), 0x9) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x1, 0x10000023, 0x4, 0x8, 0x6, 0x10001, 0x1, 0x97e, 0xff}, 0x0) wait4(r0, &(0x7f00000000c0), 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x100000000, 0x100) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000140)={0x1, 0x8, 0x5, 0x0, 0x12, "a2917d908593e6a7"}) sched_setattr(r0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x67, 0xe1, 0x1000200000000, 0x8, 0x7, 0x2, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$P9_RREADDIR(r2, &(0x7f0000000200)={0xe4, 0x29, 0x2, {0x1, [{{0x4, 0x2, 0x3}, 0x3, 0x9, 0x7, './file0'}, {{0x40, 0x0, 0x1}, 0x3, 0x7, 0x7, './file0'}, {{0x1, 0x0, 0x6}, 0x7, 0x0, 0x7, './file0'}, {{0x20, 0x4}, 0x400, 0x9, 0x7, './file0'}, {{0x1, 0x3}, 0x20, 0x8, 0x7, './file0'}, {{0x10, 0x2, 0x8}, 0x8000000000, 0x0, 0x7, './file0'}, {{0x0, 0x3, 0x1}, 0x10000, 0xa2, 0x7, './file0'}]}}, 0xe4) r3 = syz_open_dev$mouse(&(0x7f0000000300), 0xffffffff, 0x1090c0) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0xe, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x400c0c5) r4 = getpid() wait4(r4, &(0x7f0000000440), 0x4, &(0x7f0000000480)) process_vm_writev(r4, &(0x7f0000000600)=[{&(0x7f0000000540)=""/63, 0x3f}, {&(0x7f0000000580)=""/83, 0x53}], 0x2, &(0x7f0000000780)=[{&(0x7f0000000640)=""/111, 0x6f}, {&(0x7f00000006c0)=""/162, 0xa2}], 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f00000007c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) getuid() 04:18:38 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x699c1) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000100)) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x10002, 0x51, 0x4}, 0x18) io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x9570, r3, &(0x7f00000001c0)="b78a4f74d3605bd30f56252ec34d7a2051325a9ba1d8705462081b5ff3ae4e6bbf161eafe219c8ba34fb15cebf3247b70cb7db491cc2a5bd44694f5943b59b3b2b28052dfd3949c97f24bbb59903e08d2cb73eeaad2938d7e1ff4e26a3aa1ddd667b16b34ecff5174b1e11735cfb4b47e2bf8e8edf1e2b947ce2d939985732f87253049b15d4f3", 0x87, 0x80}, &(0x7f00000002c0)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000300)) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000340)=0x8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x1, r1, &(0x7f00000003c0)="931959d40ea24cc557c326dad574daa2a13a434bf5b6f60b8de1679e9c2f94c000f879407a5268acc5f63d2bbe3ecfbf43235f1f6ee22f55a9b3704c29", 0x3d, 0x9, 0x0, 0x2, r1}]) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000480)) setxattr$trusted_overlay_origin(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540), 0x2, 0x3) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x814) r6 = syz_open_dev$usbmon(&(0x7f00000006c0), 0x40, 0x200) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000740)={&(0x7f0000000700)=[0x0, 0x0, 0x0], 0x3, 0x40}) 04:18:38 executing program 2: r0 = getpgrp(0x0) waitid(0x3, r0, &(0x7f0000000000), 0x1, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) waitid(0x1, r0, &(0x7f0000000140), 0x1, &(0x7f00000001c0)) getpid() r1 = getpgrp(r0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000280)={r1}) syz_open_dev$usbmon(&(0x7f00000002c0), 0x100, 0x111002) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x4040800) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="8d4cc7159281"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8044}, 0x860) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000580)={0xc5, 0x29, 0x1, {0x3ff, [{{0x10, 0x4, 0x3}, 0x6, 0x4, 0x7, './file0'}, {{0x4, 0x2}, 0x1, 0x80, 0x7, './file0'}, {{0x20, 0x4, 0x6}, 0x7f, 0x7, 0x7, './file0'}, {{0x20, 0x3, 0x6}, 0x7, 0x7, 0x7, './file0'}, {{0x8, 0x3, 0x5}, 0x10001, 0x8, 0x7, './file0'}, {{0x8, 0x1, 0x6}, 0x8000, 0x2, 0x7, './file0'}]}}, 0xc5) 04:18:38 executing program 0: r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x70000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r1, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x68}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x22}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x401}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r2 = syz_open_dev$usbmon(&(0x7f0000000400), 0xb2, 0x80000) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) io_setup(0x0, &(0x7f0000000440)=0x0) io_cancel(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x4, r2, &(0x7f0000000480)="b900dd845382dea2338d268e3b9eb268376ab5", 0x13, 0x1, 0x0, 0x3}, &(0x7f0000000500)) r4 = syz_open_dev$mouse(&(0x7f0000000540), 0x8, 0x244100) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40885}, 0x10) socketpair(0x27, 0x5, 0xffff, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004082) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xac}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffd}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r8 = socket(0x27, 0xe8e817c5a7242f21, 0x2) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3fc00}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x40400c0) 04:18:38 executing program 3: sendto(0xffffffffffffffff, &(0x7f0000000000)="3698d5e302bf1832beca91bb33799cbeaf3ac85588bb506c9a0efc482430ef117fa3c43c93d7f3a8a39c0505f5a3608345c409d0c1f887334af5536f83a13338ad7f758f24d27771bb3ee5e21b84eec0854d21", 0x53, 0x800, &(0x7f0000000080)=@phonet={0x23, 0x7, 0xa0, 0x7}, 0x80) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="cecb86f85e88034e777c98b24e375cdad7603c65bd0d754100d663ef0b93d3468128c479e19fa8591590f033713970725769ad169dfa55e216c791aa875db3b1edd57c30d7187c58258d", 0x4a, 0x4000, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) sendto(r0, &(0x7f0000000300)="a29661fd7e2e04bc02ec888c59646191c740403d35c849c0d563fd8ff6f84257bf4263c9f6bb53e9bed24cf9a4aed9b6e013ed00ecb258fb3a1dfbe0bffed68302c006cecf", 0x45, 0x80, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x400c804) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40004) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000081) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x87ac}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x14) r2 = getpgrp(0x0) sched_setattr(r2, &(0x7f0000000800)={0x38, 0x1, 0x2, 0x7, 0x7fffffff, 0x400, 0x1, 0x5, 0x6, 0x80000000}, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000840), 0x9, 0x100) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x40000) clock_nanosleep(0x3, 0x0, &(0x7f0000000a00)={0x77359400}, &(0x7f0000000a40)) syz_open_dev$mouse(&(0x7f0000000a80), 0x7, 0x10000) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000ac0)=@req3={0x3, 0x4, 0x8, 0x1, 0x8, 0x8, 0xffff8000}, 0x1c) 04:18:50 executing program 7: r0 = getpid() ptrace$poke(0x5, r0, &(0x7f0000000000), 0x2) ptrace$poke(0x5, r0, &(0x7f0000000040), 0x9) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x1, 0x10000023, 0x4, 0x8, 0x6, 0x10001, 0x1, 0x97e, 0xff}, 0x0) wait4(r0, &(0x7f00000000c0), 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x100000000, 0x100) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000140)={0x1, 0x8, 0x5, 0x0, 0x12, "a2917d908593e6a7"}) sched_setattr(r0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x67, 0xe1, 0x1000200000000, 0x8, 0x7, 0x2, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$P9_RREADDIR(r2, &(0x7f0000000200)={0xe4, 0x29, 0x2, {0x1, [{{0x4, 0x2, 0x3}, 0x3, 0x9, 0x7, './file0'}, {{0x40, 0x0, 0x1}, 0x3, 0x7, 0x7, './file0'}, {{0x1, 0x0, 0x6}, 0x7, 0x0, 0x7, './file0'}, {{0x20, 0x4}, 0x400, 0x9, 0x7, './file0'}, {{0x1, 0x3}, 0x20, 0x8, 0x7, './file0'}, {{0x10, 0x2, 0x8}, 0x8000000000, 0x0, 0x7, './file0'}, {{0x0, 0x3, 0x1}, 0x10000, 0xa2, 0x7, './file0'}]}}, 0xe4) r3 = syz_open_dev$mouse(&(0x7f0000000300), 0xffffffff, 0x1090c0) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0xe, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x400c0c5) r4 = getpid() wait4(r4, &(0x7f0000000440), 0x4, &(0x7f0000000480)) process_vm_writev(r4, &(0x7f0000000600)=[{&(0x7f0000000540)=""/63, 0x3f}, {&(0x7f0000000580)=""/83, 0x53}], 0x2, &(0x7f0000000780)=[{&(0x7f0000000640)=""/111, 0x6f}, {&(0x7f00000006c0)=""/162, 0xa2}], 0x2, 0x0) getuid() 04:18:50 executing program 3: sendto(0xffffffffffffffff, &(0x7f0000000000)="3698d5e302bf1832beca91bb33799cbeaf3ac85588bb506c9a0efc482430ef117fa3c43c93d7f3a8a39c0505f5a3608345c409d0c1f887334af5536f83a13338ad7f758f24d27771bb3ee5e21b84eec0854d21", 0x53, 0x800, &(0x7f0000000080)=@phonet={0x23, 0x7, 0xa0, 0x7}, 0x80) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="cecb86f85e88034e777c98b24e375cdad7603c65bd0d754100d663ef0b93d3468128c479e19fa8591590f033713970725769ad169dfa55e216c791aa875db3b1edd57c30d7187c58258d", 0x4a, 0x4000, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) sendto(r0, &(0x7f0000000300)="a29661fd7e2e04bc02ec888c59646191c740403d35c849c0d563fd8ff6f84257bf4263c9f6bb53e9bed24cf9a4aed9b6e013ed00ecb258fb3a1dfbe0bffed68302c006cecf", 0x45, 0x80, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x400c804) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40004) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000081) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x87ac}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x14) r2 = getpgrp(0x0) sched_setattr(r2, &(0x7f0000000800)={0x38, 0x1, 0x2, 0x7, 0x7fffffff, 0x400, 0x1, 0x5, 0x6, 0x80000000}, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000840), 0x9, 0x100) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x40000) clock_nanosleep(0x3, 0x0, &(0x7f0000000a00)={0x77359400}, &(0x7f0000000a40)) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000ac0)=@req3={0x3, 0x4, 0x8, 0x1, 0x8, 0x8, 0xffff8000}, 0x1c) 04:18:50 executing program 6: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x800, 0x20080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @random="844e53aa344e"}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10044040}, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xbd}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x800}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4000094) r3 = syz_open_dev$hiddev(&(0x7f0000000340), 0xc7, 0x430900) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f0000000380)={0x3, 0x200, 0x7}) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f00000003c0)={0x1, 0x2, 0xaec}) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f0000000400)={0x2, 0x1, 0x10000, 0x100, 0xfffffff7, 0x7fff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$HIDIOCGREPORTINFO(r3, 0xc00c4809, &(0x7f0000000580)={0x3, 0x2, 0x7}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc275}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) getsockname$packet(r0, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000840)=0x14) sendto$packet(r0, &(0x7f0000000740)="eac34db01a69cd3a024d532780f5b07efdf33f90c9f1c368e67520825400bb049aac7fb2bcbf34a47fc4ca855316c535c5fe88511b7f4d5332dc470dc306b78e1513c6e0727972b0479220530201318bdce4e5b1f0591ceaea23096858d25774b0900091e5614305a9aec3f6ce6e291c3484d4c583d7fc62654422b726788207dc7112f539eda1f7828a34fe58ac14", 0x8f, 0x48000, &(0x7f0000000880)={0x11, 0x0, r6, 0x1, 0xbb, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f00000008c0)={0x3, 0x1, 0x5}) sendto$packet(r0, &(0x7f0000000900)="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", 0x1000, 0x80, &(0x7f0000001900)={0x11, 0xf6, r6, 0x1, 0x92, 0x6, @remote}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001940)={0x2, 0x6}, 0x4) 04:18:50 executing program 0: r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x70000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r1, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x68}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x22}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x401}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r2 = syz_open_dev$usbmon(&(0x7f0000000400), 0xb2, 0x80000) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) io_setup(0x0, &(0x7f0000000440)=0x0) io_cancel(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x4, r2, &(0x7f0000000480)="b900dd845382dea2338d268e3b9eb268376ab5", 0x13, 0x1, 0x0, 0x3}, &(0x7f0000000500)) r4 = syz_open_dev$mouse(&(0x7f0000000540), 0x8, 0x244100) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40885}, 0x10) socketpair(0x27, 0x5, 0xffff, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004082) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xac}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffd}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x1) socket(0x27, 0xe8e817c5a7242f21, 0x2) 04:18:50 executing program 2: r0 = getpgrp(0x0) waitid(0x3, r0, &(0x7f0000000000), 0x1, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) waitid(0x1, r0, &(0x7f0000000140), 0x1, &(0x7f00000001c0)) getpid() r1 = getpgrp(r0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000280)={r1}) syz_open_dev$usbmon(&(0x7f00000002c0), 0x100, 0x111002) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x4040800) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000580)={0xc5, 0x29, 0x1, {0x3ff, [{{0x10, 0x4, 0x3}, 0x6, 0x4, 0x7, './file0'}, {{0x4, 0x2}, 0x1, 0x80, 0x7, './file0'}, {{0x20, 0x4, 0x6}, 0x7f, 0x7, 0x7, './file0'}, {{0x20, 0x3, 0x6}, 0x7, 0x7, 0x7, './file0'}, {{0x8, 0x3, 0x5}, 0x10001, 0x8, 0x7, './file0'}, {{0x8, 0x1, 0x6}, 0x8000, 0x2, 0x7, './file0'}]}}, 0xc5) 04:18:50 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x699c1) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000100)) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x10002, 0x51, 0x4}, 0x18) io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x9570, r3, &(0x7f00000001c0)="b78a4f74d3605bd30f56252ec34d7a2051325a9ba1d8705462081b5ff3ae4e6bbf161eafe219c8ba34fb15cebf3247b70cb7db491cc2a5bd44694f5943b59b3b2b28052dfd3949c97f24bbb59903e08d2cb73eeaad2938d7e1ff4e26a3aa1ddd667b16b34ecff5174b1e11735cfb4b47e2bf8e8edf1e2b947ce2d939985732f87253049b15d4f3", 0x87, 0x80}, &(0x7f00000002c0)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000300)) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000340)=0x8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x1, r1, &(0x7f00000003c0)="931959d40ea24cc557c326dad574daa2a13a434bf5b6f60b8de1679e9c2f94c000f879407a5268acc5f63d2bbe3ecfbf43235f1f6ee22f55a9b3704c29", 0x3d, 0x9, 0x0, 0x2, r1}]) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000480)) setxattr$trusted_overlay_origin(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540), 0x2, 0x3) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x814) syz_open_dev$usbmon(&(0x7f00000006c0), 0x40, 0x200) 04:18:50 executing program 5: sched_yield() sched_yield() r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9f6, 0x80200) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) prctl$PR_SVE_GET_VL(0x33, 0x1cfa4) sched_yield() ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000280)) sched_yield() ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f00000002c0)={0x3, 0x1, 0x7b8, 0x8, 0x5, 0x4}) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x8010, r0, 0x9) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000340)='\'^\'-[\\\x00', &(0x7f0000000380)=':#{%%\'%:$(],\x00', &(0x7f00000003c0)='@-&\x00'], &(0x7f0000000640)=[&(0x7f0000000440)='/dev/usbmon#\x00', &(0x7f0000000480)='/dev/usbmon#\x00', &(0x7f00000004c0)='/dev/usbmon#\x00', &(0x7f0000000500)='/dev/usbmon#\x00', &(0x7f0000000540)='/dev/usbmon#\x00', &(0x7f0000000580)='/dev/usbmon#\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='/dev/usbmon#\x00']) prctl$PR_SVE_GET_VL(0x33, 0x2b4c) prctl$PR_SVE_GET_VL(0x33, 0x172ca) socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r2, 0x800, 0x0, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan3\x00'}) 04:18:50 executing program 4: sched_setattr(0xffffffffffffffff, &(0x7f0000000000)={0x38, 0x1, 0x18, 0x81, 0x5, 0x0, 0x0, 0x1f, 0x6, 0x80}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000040)={0x38, 0x5, 0x73, 0x1, 0x3, 0x6, 0x9, 0x8, 0xffffff84, 0xfa}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000080)={0x38, 0x5, 0x40, 0xae22, 0x8, 0x4, 0xb268, 0x3, 0xff, 0x3}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x10000040, 0x8000, 0x2, 0x8, 0x0, 0x0, 0x8000, 0x1}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x2, 0xe, 0x7, 0x82, 0x100000000, 0x7ff, 0x8000000000000000, 0x3}, 0x0) getpid() r0 = getpid() sched_setattr(r0, &(0x7f0000000140)={0x38, 0x3, 0x14, 0x6ca1c65c, 0x1, 0x3, 0x2, 0x6d8, 0x40, 0x100}, 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x8000, 0x50) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x3, 0x0, 0x4, 0x962, 0x3, 0x8, 0x10001, 0x7, 0x1}, 0x0) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000280)=""/155) setpgid(r3, r3) sched_setattr(r3, &(0x7f0000000340)={0x38, 0x3, 0x10000001, 0x9, 0x7, 0x2, 0x5, 0x3f, 0x3ff, 0x1966bb89}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4200080}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x8, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 04:18:50 executing program 7: r0 = getpid() ptrace$poke(0x5, r0, &(0x7f0000000000), 0x2) ptrace$poke(0x5, r0, &(0x7f0000000040), 0x9) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x1, 0x10000023, 0x4, 0x8, 0x6, 0x10001, 0x1, 0x97e, 0xff}, 0x0) wait4(r0, &(0x7f00000000c0), 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x100000000, 0x100) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000140)={0x1, 0x8, 0x5, 0x0, 0x12, "a2917d908593e6a7"}) sched_setattr(r0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x67, 0xe1, 0x1000200000000, 0x8, 0x7, 0x2, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$P9_RREADDIR(r2, &(0x7f0000000200)={0xe4, 0x29, 0x2, {0x1, [{{0x4, 0x2, 0x3}, 0x3, 0x9, 0x7, './file0'}, {{0x40, 0x0, 0x1}, 0x3, 0x7, 0x7, './file0'}, {{0x1, 0x0, 0x6}, 0x7, 0x0, 0x7, './file0'}, {{0x20, 0x4}, 0x400, 0x9, 0x7, './file0'}, {{0x1, 0x3}, 0x20, 0x8, 0x7, './file0'}, {{0x10, 0x2, 0x8}, 0x8000000000, 0x0, 0x7, './file0'}, {{0x0, 0x3, 0x1}, 0x10000, 0xa2, 0x7, './file0'}]}}, 0xe4) r3 = syz_open_dev$mouse(&(0x7f0000000300), 0xffffffff, 0x1090c0) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0xe, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x400c0c5) r4 = getpid() wait4(r4, &(0x7f0000000440), 0x4, &(0x7f0000000480)) getuid() 04:18:50 executing program 2: r0 = getpgrp(0x0) waitid(0x3, r0, &(0x7f0000000000), 0x1, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) waitid(0x1, r0, &(0x7f0000000140), 0x1, &(0x7f00000001c0)) getpid() r1 = getpgrp(r0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000280)={r1}) syz_open_dev$usbmon(&(0x7f00000002c0), 0x100, 0x111002) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000580)={0xc5, 0x29, 0x1, {0x3ff, [{{0x10, 0x4, 0x3}, 0x6, 0x4, 0x7, './file0'}, {{0x4, 0x2}, 0x1, 0x80, 0x7, './file0'}, {{0x20, 0x4, 0x6}, 0x7f, 0x7, 0x7, './file0'}, {{0x20, 0x3, 0x6}, 0x7, 0x7, 0x7, './file0'}, {{0x8, 0x3, 0x5}, 0x10001, 0x8, 0x7, './file0'}, {{0x8, 0x1, 0x6}, 0x8000, 0x2, 0x7, './file0'}]}}, 0xc5) 04:18:50 executing program 4: sched_setattr(0xffffffffffffffff, &(0x7f0000000000)={0x38, 0x1, 0x18, 0x81, 0x5, 0x0, 0x0, 0x1f, 0x6, 0x80}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000040)={0x38, 0x5, 0x73, 0x1, 0x3, 0x6, 0x9, 0x8, 0xffffff84, 0xfa}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000080)={0x38, 0x5, 0x40, 0xae22, 0x8, 0x4, 0xb268, 0x3, 0xff, 0x3}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x10000040, 0x8000, 0x2, 0x8, 0x0, 0x0, 0x8000, 0x1}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x2, 0xe, 0x7, 0x82, 0x100000000, 0x7ff, 0x8000000000000000, 0x3}, 0x0) getpid() r0 = getpid() sched_setattr(r0, &(0x7f0000000140)={0x38, 0x3, 0x14, 0x6ca1c65c, 0x1, 0x3, 0x2, 0x6d8, 0x40, 0x100}, 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x8000, 0x50) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x3, 0x0, 0x4, 0x962, 0x3, 0x8, 0x10001, 0x7, 0x1}, 0x0) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000280)=""/155) setpgid(r3, r3) sched_setattr(r3, &(0x7f0000000340)={0x38, 0x3, 0x10000001, 0x9, 0x7, 0x2, 0x5, 0x3f, 0x3ff, 0x1966bb89}, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4200080}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x8, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 04:18:50 executing program 2: r0 = getpgrp(0x0) waitid(0x3, r0, &(0x7f0000000000), 0x1, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) waitid(0x1, r0, &(0x7f0000000140), 0x1, &(0x7f00000001c0)) getpid() r1 = getpgrp(r0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000280)={r1}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000580)={0xc5, 0x29, 0x1, {0x3ff, [{{0x10, 0x4, 0x3}, 0x6, 0x4, 0x7, './file0'}, {{0x4, 0x2}, 0x1, 0x80, 0x7, './file0'}, {{0x20, 0x4, 0x6}, 0x7f, 0x7, 0x7, './file0'}, {{0x20, 0x3, 0x6}, 0x7, 0x7, 0x7, './file0'}, {{0x8, 0x3, 0x5}, 0x10001, 0x8, 0x7, './file0'}, {{0x8, 0x1, 0x6}, 0x8000, 0x2, 0x7, './file0'}]}}, 0xc5) 04:18:50 executing program 4: sched_setattr(0xffffffffffffffff, &(0x7f0000000000)={0x38, 0x1, 0x18, 0x81, 0x5, 0x0, 0x0, 0x1f, 0x6, 0x80}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000040)={0x38, 0x5, 0x73, 0x1, 0x3, 0x6, 0x9, 0x8, 0xffffff84, 0xfa}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000080)={0x38, 0x5, 0x40, 0xae22, 0x8, 0x4, 0xb268, 0x3, 0xff, 0x3}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x10000040, 0x8000, 0x2, 0x8, 0x0, 0x0, 0x8000, 0x1}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x2, 0xe, 0x7, 0x82, 0x100000000, 0x7ff, 0x8000000000000000, 0x3}, 0x0) getpid() r0 = getpid() sched_setattr(r0, &(0x7f0000000140)={0x38, 0x3, 0x14, 0x6ca1c65c, 0x1, 0x3, 0x2, 0x6d8, 0x40, 0x100}, 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x8000, 0x50) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x3, 0x0, 0x4, 0x962, 0x3, 0x8, 0x10001, 0x7, 0x1}, 0x0) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000280)=""/155) setpgid(r3, r3) sched_setattr(r3, &(0x7f0000000340)={0x38, 0x3, 0x10000001, 0x9, 0x7, 0x2, 0x5, 0x3f, 0x3ff, 0x1966bb89}, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4200080}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x8, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 04:19:04 executing program 5: sched_yield() sched_yield() r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9f6, 0x80200) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) prctl$PR_SVE_GET_VL(0x33, 0x1cfa4) sched_yield() ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000280)) sched_yield() ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f00000002c0)={0x3, 0x1, 0x7b8, 0x8, 0x5, 0x4}) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x8010, r0, 0x9) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000340)='\'^\'-[\\\x00', &(0x7f0000000380)=':#{%%\'%:$(],\x00', &(0x7f00000003c0)='@-&\x00'], &(0x7f0000000640)=[&(0x7f0000000440)='/dev/usbmon#\x00', &(0x7f0000000480)='/dev/usbmon#\x00', &(0x7f00000004c0)='/dev/usbmon#\x00', &(0x7f0000000500)='/dev/usbmon#\x00', &(0x7f0000000540)='/dev/usbmon#\x00', &(0x7f0000000580)='/dev/usbmon#\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='/dev/usbmon#\x00']) prctl$PR_SVE_GET_VL(0x33, 0x2b4c) prctl$PR_SVE_GET_VL(0x33, 0x172ca) socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r2, 0x800, 0x0, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan3\x00'}) 04:19:04 executing program 2: r0 = getpgrp(0x0) waitid(0x3, r0, &(0x7f0000000000), 0x1, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) waitid(0x1, r0, &(0x7f0000000140), 0x1, &(0x7f00000001c0)) getpid() getpgrp(r0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000580)={0xc5, 0x29, 0x1, {0x3ff, [{{0x10, 0x4, 0x3}, 0x6, 0x4, 0x7, './file0'}, {{0x4, 0x2}, 0x1, 0x80, 0x7, './file0'}, {{0x20, 0x4, 0x6}, 0x7f, 0x7, 0x7, './file0'}, {{0x20, 0x3, 0x6}, 0x7, 0x7, 0x7, './file0'}, {{0x8, 0x3, 0x5}, 0x10001, 0x8, 0x7, './file0'}, {{0x8, 0x1, 0x6}, 0x8000, 0x2, 0x7, './file0'}]}}, 0xc5) 04:19:04 executing program 6: sched_yield() sched_yield() r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9f6, 0x80200) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) prctl$PR_SVE_GET_VL(0x33, 0x1cfa4) sched_yield() ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000280)) sched_yield() ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f00000002c0)={0x3, 0x1, 0x7b8, 0x8, 0x5, 0x4}) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x8010, r0, 0x9) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000340)='\'^\'-[\\\x00', &(0x7f0000000380)=':#{%%\'%:$(],\x00', &(0x7f00000003c0)='@-&\x00'], &(0x7f0000000640)=[&(0x7f0000000440)='/dev/usbmon#\x00', &(0x7f0000000480)='/dev/usbmon#\x00', &(0x7f00000004c0)='/dev/usbmon#\x00', &(0x7f0000000500)='/dev/usbmon#\x00', &(0x7f0000000540)='/dev/usbmon#\x00', &(0x7f0000000580)='/dev/usbmon#\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='/dev/usbmon#\x00']) prctl$PR_SVE_GET_VL(0x33, 0x2b4c) prctl$PR_SVE_GET_VL(0x33, 0x172ca) socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r2, 0x800, 0x0, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan3\x00'}) 04:19:04 executing program 7: r0 = getpid() ptrace$poke(0x5, r0, &(0x7f0000000000), 0x2) ptrace$poke(0x5, r0, &(0x7f0000000040), 0x9) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x1, 0x10000023, 0x4, 0x8, 0x6, 0x10001, 0x1, 0x97e, 0xff}, 0x0) wait4(r0, &(0x7f00000000c0), 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x100000000, 0x100) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000140)={0x1, 0x8, 0x5, 0x0, 0x12, "a2917d908593e6a7"}) sched_setattr(r0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x67, 0xe1, 0x1000200000000, 0x8, 0x7, 0x2, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$P9_RREADDIR(r2, &(0x7f0000000200)={0xe4, 0x29, 0x2, {0x1, [{{0x4, 0x2, 0x3}, 0x3, 0x9, 0x7, './file0'}, {{0x40, 0x0, 0x1}, 0x3, 0x7, 0x7, './file0'}, {{0x1, 0x0, 0x6}, 0x7, 0x0, 0x7, './file0'}, {{0x20, 0x4}, 0x400, 0x9, 0x7, './file0'}, {{0x1, 0x3}, 0x20, 0x8, 0x7, './file0'}, {{0x10, 0x2, 0x8}, 0x8000000000, 0x0, 0x7, './file0'}, {{0x0, 0x3, 0x1}, 0x10000, 0xa2, 0x7, './file0'}]}}, 0xe4) r3 = syz_open_dev$mouse(&(0x7f0000000300), 0xffffffff, 0x1090c0) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0xe, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x400c0c5) getpid() getuid() 04:19:04 executing program 3: sendto(0xffffffffffffffff, &(0x7f0000000000)="3698d5e302bf1832beca91bb33799cbeaf3ac85588bb506c9a0efc482430ef117fa3c43c93d7f3a8a39c0505f5a3608345c409d0c1f887334af5536f83a13338ad7f758f24d27771bb3ee5e21b84eec0854d21", 0x53, 0x800, &(0x7f0000000080)=@phonet={0x23, 0x7, 0xa0, 0x7}, 0x80) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="cecb86f85e88034e777c98b24e375cdad7603c65bd0d754100d663ef0b93d3468128c479e19fa8591590f033713970725769ad169dfa55e216c791aa875db3b1edd57c30d7187c58258d", 0x4a, 0x4000, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) sendto(r0, &(0x7f0000000300)="a29661fd7e2e04bc02ec888c59646191c740403d35c849c0d563fd8ff6f84257bf4263c9f6bb53e9bed24cf9a4aed9b6e013ed00ecb258fb3a1dfbe0bffed68302c006cecf", 0x45, 0x80, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x400c804) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40004) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000081) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x87ac}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x14) r2 = getpgrp(0x0) sched_setattr(r2, &(0x7f0000000800)={0x38, 0x1, 0x2, 0x7, 0x7fffffff, 0x400, 0x1, 0x5, 0x6, 0x80000000}, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000840), 0x9, 0x100) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x40000) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000ac0)=@req3={0x3, 0x4, 0x8, 0x1, 0x8, 0x8, 0xffff8000}, 0x1c) 04:19:04 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x699c1) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000100)) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x10002, 0x51, 0x4}, 0x18) io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x9570, r3, &(0x7f00000001c0)="b78a4f74d3605bd30f56252ec34d7a2051325a9ba1d8705462081b5ff3ae4e6bbf161eafe219c8ba34fb15cebf3247b70cb7db491cc2a5bd44694f5943b59b3b2b28052dfd3949c97f24bbb59903e08d2cb73eeaad2938d7e1ff4e26a3aa1ddd667b16b34ecff5174b1e11735cfb4b47e2bf8e8edf1e2b947ce2d939985732f87253049b15d4f3", 0x87, 0x80}, &(0x7f00000002c0)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000300)) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000340)=0x8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x1, r1, &(0x7f00000003c0)="931959d40ea24cc557c326dad574daa2a13a434bf5b6f60b8de1679e9c2f94c000f879407a5268acc5f63d2bbe3ecfbf43235f1f6ee22f55a9b3704c29", 0x3d, 0x9, 0x0, 0x2, r1}]) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000480)) setxattr$trusted_overlay_origin(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540), 0x2, 0x3) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x814) syz_open_dev$usbmon(&(0x7f00000006c0), 0x40, 0x200) 04:19:04 executing program 0: r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x70000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r1, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x68}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x22}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x401}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r2 = syz_open_dev$usbmon(&(0x7f0000000400), 0xb2, 0x80000) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) io_setup(0x0, &(0x7f0000000440)=0x0) io_cancel(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x4, r2, &(0x7f0000000480)="b900dd845382dea2338d268e3b9eb268376ab5", 0x13, 0x1, 0x0, 0x3}, &(0x7f0000000500)) r4 = syz_open_dev$mouse(&(0x7f0000000540), 0x8, 0x244100) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40885}, 0x10) socketpair(0x27, 0x5, 0xffff, &(0x7f00000006c0)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004082) socket(0x27, 0xe8e817c5a7242f21, 0x2) 04:19:04 executing program 4: sched_setattr(0xffffffffffffffff, &(0x7f0000000000)={0x38, 0x1, 0x18, 0x81, 0x5, 0x0, 0x0, 0x1f, 0x6, 0x80}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000040)={0x38, 0x5, 0x73, 0x1, 0x3, 0x6, 0x9, 0x8, 0xffffff84, 0xfa}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000080)={0x38, 0x5, 0x40, 0xae22, 0x8, 0x4, 0xb268, 0x3, 0xff, 0x3}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x10000040, 0x8000, 0x2, 0x8, 0x0, 0x0, 0x8000, 0x1}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x2, 0xe, 0x7, 0x82, 0x100000000, 0x7ff, 0x8000000000000000, 0x3}, 0x0) getpid() r0 = getpid() sched_setattr(r0, &(0x7f0000000140)={0x38, 0x3, 0x14, 0x6ca1c65c, 0x1, 0x3, 0x2, 0x6d8, 0x40, 0x100}, 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x8000, 0x50) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x3, 0x0, 0x4, 0x962, 0x3, 0x8, 0x10001, 0x7, 0x1}, 0x0) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000280)=""/155) setpgid(r3, r3) sched_setattr(r3, &(0x7f0000000340)={0x38, 0x3, 0x10000001, 0x9, 0x7, 0x2, 0x5, 0x3f, 0x3ff, 0x1966bb89}, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4200080}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x8, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) [ 183.666793] Bluetooth: hci0: command 0x0406 tx timeout [ 183.666971] Bluetooth: hci1: command 0x0406 tx timeout [ 183.667692] Bluetooth: hci2: command 0x0406 tx timeout [ 183.668545] Bluetooth: hci4: command 0x0406 tx timeout [ 183.669325] Bluetooth: hci5: command 0x0406 tx timeout [ 183.670176] Bluetooth: hci6: command 0x0406 tx timeout [ 183.670912] Bluetooth: hci7: command 0x0406 tx timeout [ 187.762773] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 187.763548] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.764143] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.764941] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 187.765767] Call Trace: [ 187.766214] [ 187.766450] __schedule+0x893/0x2470 [ 187.767336] ? io_schedule_timeout+0x150/0x150 [ 187.768246] ? do_raw_spin_lock+0x121/0x260 [ 187.768728] ? rwlock_bug.part.0+0x90/0x90 [ 187.769174] schedule+0xda/0x1b0 [ 187.769530] rescuer_thread+0x851/0xdb0 [ 187.769968] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.770473] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.771002] ? lockdep_hardirqs_on+0x79/0x100 [ 187.771467] ? worker_thread+0x1260/0x1260 [ 187.771926] kthread+0x2ed/0x3a0 [ 187.772278] ? kthread_complete_and_exit+0x40/0x40 [ 187.772830] ret_from_fork+0x22/0x30 [ 187.773241] [ 187.773483] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 187.774128] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.774674] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.775408] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 187.776249] Call Trace: [ 187.776508] [ 187.776776] __schedule+0x893/0x2470 [ 187.777154] ? io_schedule_timeout+0x150/0x150 [ 187.777634] ? do_raw_spin_lock+0x121/0x260 [ 187.778082] ? rwlock_bug.part.0+0x90/0x90 [ 187.778530] schedule+0xda/0x1b0 [ 187.778926] rescuer_thread+0x851/0xdb0 [ 187.779340] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.779865] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.780372] ? lockdep_hardirqs_on+0x79/0x100 [ 187.780882] ? worker_thread+0x1260/0x1260 [ 187.781319] kthread+0x2ed/0x3a0 [ 187.781690] ? kthread_complete_and_exit+0x40/0x40 [ 187.782187] ret_from_fork+0x22/0x30 [ 187.782586] [ 187.782849] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 187.783488] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.784028] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.784802] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 187.785636] Call Trace: [ 187.785896] [ 187.786136] __schedule+0x893/0x2470 [ 187.786535] ? io_schedule_timeout+0x150/0x150 [ 187.787025] ? do_raw_spin_lock+0x121/0x260 [ 187.787475] ? rwlock_bug.part.0+0x90/0x90 [ 187.787940] schedule+0xda/0x1b0 [ 187.788293] rescuer_thread+0x851/0xdb0 [ 187.788864] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.789752] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.790626] ? lockdep_hardirqs_on+0x79/0x100 [ 187.791393] ? worker_thread+0x1260/0x1260 [ 187.792146] kthread+0x2ed/0x3a0 [ 187.792773] ? kthread_complete_and_exit+0x40/0x40 [ 187.793623] ret_from_fork+0x22/0x30 [ 187.794393] [ 187.794980] INFO: task netns:6 blocked for more than 143 seconds. [ 187.796351] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.797578] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.799171] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 187.800881] Call Trace: [ 187.801404] [ 187.801925] __schedule+0x893/0x2470 [ 187.802761] ? io_schedule_timeout+0x150/0x150 [ 187.803734] ? do_raw_spin_lock+0x121/0x260 [ 187.804692] ? rwlock_bug.part.0+0x90/0x90 [ 187.805584] schedule+0xda/0x1b0 [ 187.806340] rescuer_thread+0x851/0xdb0 [ 187.807216] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.808264] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.809335] ? lockdep_hardirqs_on+0x79/0x100 [ 187.810307] ? worker_thread+0x1260/0x1260 [ 187.811232] kthread+0x2ed/0x3a0 [ 187.811985] ? kthread_complete_and_exit+0x40/0x40 [ 187.813045] ret_from_fork+0x22/0x30 [ 187.813914] [ 187.814407] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 187.815737] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.816843] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.818391] task:kworker/0:0 state:I stack:29592 pid:7 ppid:2 flags:0x00004000 [ 187.820087] Workqueue: 0x0 (rcu_gp) [ 187.820909] Call Trace: [ 187.821433] [ 187.821945] __schedule+0x893/0x2470 [ 187.822782] ? io_schedule_timeout+0x150/0x150 [ 187.823782] schedule+0xda/0x1b0 [ 187.824496] worker_thread+0x15f/0x1260 [ 187.825420] ? process_one_work+0x16a0/0x16a0 [ 187.826465] kthread+0x2ed/0x3a0 [ 187.827221] ? kthread_complete_and_exit+0x40/0x40 [ 187.828276] ret_from_fork+0x22/0x30 [ 187.829032] [ 187.829389] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 187.830396] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.831205] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.832357] task:kworker/0:0H state:I stack:29760 pid:8 ppid:2 flags:0x00004000 [ 187.833632] Workqueue: 0x0 (events_highpri) [ 187.834307] Call Trace: [ 187.834720] [ 187.835073] __schedule+0x893/0x2470 [ 187.835682] ? io_schedule_timeout+0x150/0x150 [ 187.836393] schedule+0xda/0x1b0 [ 187.836966] worker_thread+0x15f/0x1260 [ 187.837620] ? process_one_work+0x16a0/0x16a0 [ 187.838307] kthread+0x2ed/0x3a0 [ 187.838853] ? kthread_complete_and_exit+0x40/0x40 [ 187.839621] ret_from_fork+0x22/0x30 [ 187.840217] [ 187.840574] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 187.841574] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.842383] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.843537] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 187.844814] Call Trace: [ 187.845202] [ 187.845551] __schedule+0x893/0x2470 [ 187.846164] ? io_schedule_timeout+0x150/0x150 [ 187.846878] ? do_raw_spin_lock+0x121/0x260 [ 187.847531] ? rwlock_bug.part.0+0x90/0x90 [ 187.848213] schedule+0xda/0x1b0 [ 187.848786] rescuer_thread+0x851/0xdb0 [ 187.849395] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.850185] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.850964] ? lockdep_hardirqs_on+0x79/0x100 [ 187.851614] ? worker_thread+0x1260/0x1260 [ 187.852206] kthread+0x2ed/0x3a0 [ 187.852715] ? kthread_complete_and_exit+0x40/0x40 [ 187.853388] ret_from_fork+0x22/0x30 [ 187.853965] [ 187.854293] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 187.855247] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.855974] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.857029] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 187.858152] Call Trace: [ 187.858502] [ 187.858851] __schedule+0x893/0x2470 [ 187.859389] ? io_schedule_timeout+0x150/0x150 [ 187.860053] ? mark_held_locks+0x9e/0xe0 [ 187.860665] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.861356] schedule+0xda/0x1b0 [ 187.861860] rcu_tasks_one_gp+0x3db/0xc10 [ 187.862459] rcu_tasks_kthread+0x80/0xa0 [ 187.863043] ? rcu_tasks_postscan+0x10/0x10 [ 187.863672] kthread+0x2ed/0x3a0 [ 187.864146] ? kthread_complete_and_exit+0x40/0x40 [ 187.864865] ret_from_fork+0x22/0x30 [ 187.865410] [ 187.865787] Bluetooth: hci3: command 0x0406 tx timeout [ 187.965675] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 187.966684] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.967417] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.968516] task:kworker/1:0H state:I stack:29256 pid:21 ppid:2 flags:0x00004000 [ 187.969744] Workqueue: 0x0 (kblockd) [ 187.970304] Call Trace: [ 187.970704] [ 187.971046] __schedule+0x893/0x2470 [ 187.971635] ? io_schedule_timeout+0x150/0x150 [ 187.972313] schedule+0xda/0x1b0 [ 187.972854] worker_thread+0x15f/0x1260 [ 187.973455] ? process_one_work+0x16a0/0x16a0 [ 187.974135] kthread+0x2ed/0x3a0 [ 187.974665] ? kthread_complete_and_exit+0x40/0x40 [ 187.975362] ret_from_fork+0x22/0x30 [ 187.975954] [ 187.976292] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 187.977269] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.978035] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.979103] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 187.980270] Call Trace: [ 187.980679] [ 187.981017] __schedule+0x893/0x2470 [ 187.981569] ? io_schedule_timeout+0x150/0x150 [ 187.982251] ? do_raw_spin_lock+0x121/0x260 [ 187.982902] ? rwlock_bug.part.0+0x90/0x90 [ 187.983521] schedule+0xda/0x1b0 [ 187.984058] rescuer_thread+0x851/0xdb0 [ 187.984673] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.985391] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.986132] ? lockdep_hardirqs_on+0x79/0x100 [ 187.986805] ? worker_thread+0x1260/0x1260 [ 187.987421] kthread+0x2ed/0x3a0 [ 187.987946] ? kthread_complete_and_exit+0x40/0x40 [ 187.988698] ret_from_fork+0x22/0x30 [ 187.989267] [ 187.989692] [ 187.989692] Showing all locks held in the system: [ 187.990541] 1 lock held by rcu_tasks_kthre/11: [ 187.991200] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 187.992709] 1 lock held by khungtaskd/25: [ 187.993341] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 187.994754] 1 lock held by in:imklog/204: [ 187.995376] 3 locks held by syz-executor/4251: [ 187.996085] [ 187.996351] ============================================= [ 187.996351] 04:19:19 executing program 7: r0 = getpid() ptrace$poke(0x5, r0, &(0x7f0000000000), 0x2) ptrace$poke(0x5, r0, &(0x7f0000000040), 0x9) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x1, 0x10000023, 0x4, 0x8, 0x6, 0x10001, 0x1, 0x97e, 0xff}, 0x0) wait4(r0, &(0x7f00000000c0), 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x100000000, 0x100) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000140)={0x1, 0x8, 0x5, 0x0, 0x12, "a2917d908593e6a7"}) sched_setattr(r0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x67, 0xe1, 0x1000200000000, 0x8, 0x7, 0x2, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$P9_RREADDIR(r2, &(0x7f0000000200)={0xe4, 0x29, 0x2, {0x1, [{{0x4, 0x2, 0x3}, 0x3, 0x9, 0x7, './file0'}, {{0x40, 0x0, 0x1}, 0x3, 0x7, 0x7, './file0'}, {{0x1, 0x0, 0x6}, 0x7, 0x0, 0x7, './file0'}, {{0x20, 0x4}, 0x400, 0x9, 0x7, './file0'}, {{0x1, 0x3}, 0x20, 0x8, 0x7, './file0'}, {{0x10, 0x2, 0x8}, 0x8000000000, 0x0, 0x7, './file0'}, {{0x0, 0x3, 0x1}, 0x10000, 0xa2, 0x7, './file0'}]}}, 0xe4) r3 = syz_open_dev$mouse(&(0x7f0000000300), 0xffffffff, 0x1090c0) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0xe, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x400c0c5) getuid() 04:19:19 executing program 3: sendto(0xffffffffffffffff, &(0x7f0000000000)="3698d5e302bf1832beca91bb33799cbeaf3ac85588bb506c9a0efc482430ef117fa3c43c93d7f3a8a39c0505f5a3608345c409d0c1f887334af5536f83a13338ad7f758f24d27771bb3ee5e21b84eec0854d21", 0x53, 0x800, &(0x7f0000000080)=@phonet={0x23, 0x7, 0xa0, 0x7}, 0x80) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="cecb86f85e88034e777c98b24e375cdad7603c65bd0d754100d663ef0b93d3468128c479e19fa8591590f033713970725769ad169dfa55e216c791aa875db3b1edd57c30d7187c58258d", 0x4a, 0x4000, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) sendto(r0, &(0x7f0000000300)="a29661fd7e2e04bc02ec888c59646191c740403d35c849c0d563fd8ff6f84257bf4263c9f6bb53e9bed24cf9a4aed9b6e013ed00ecb258fb3a1dfbe0bffed68302c006cecf", 0x45, 0x80, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x400c804) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40004) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000081) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x87ac}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x14) r2 = getpgrp(0x0) sched_setattr(r2, &(0x7f0000000800)={0x38, 0x1, 0x2, 0x7, 0x7fffffff, 0x400, 0x1, 0x5, 0x6, 0x80000000}, 0x0) syz_open_dev$mouse(&(0x7f0000000840), 0x9, 0x100) syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000900)) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000ac0)=@req3={0x3, 0x4, 0x8, 0x1, 0x8, 0x8, 0xffff8000}, 0x1c) 04:19:19 executing program 6: sched_yield() sched_yield() r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9f6, 0x80200) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) prctl$PR_SVE_GET_VL(0x33, 0x1cfa4) sched_yield() ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000280)) sched_yield() ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f00000002c0)={0x3, 0x1, 0x7b8, 0x8, 0x5, 0x4}) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x8010, r0, 0x9) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000340)='\'^\'-[\\\x00', &(0x7f0000000380)=':#{%%\'%:$(],\x00', &(0x7f00000003c0)='@-&\x00'], &(0x7f0000000640)=[&(0x7f0000000440)='/dev/usbmon#\x00', &(0x7f0000000480)='/dev/usbmon#\x00', &(0x7f00000004c0)='/dev/usbmon#\x00', &(0x7f0000000500)='/dev/usbmon#\x00', &(0x7f0000000540)='/dev/usbmon#\x00', &(0x7f0000000580)='/dev/usbmon#\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='/dev/usbmon#\x00']) prctl$PR_SVE_GET_VL(0x33, 0x2b4c) prctl$PR_SVE_GET_VL(0x33, 0x172ca) socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r2, 0x800, 0x0, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan3\x00'}) 04:19:19 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x699c1) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000100)) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x10002, 0x51, 0x4}, 0x18) io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x9570, r3, &(0x7f00000001c0)="b78a4f74d3605bd30f56252ec34d7a2051325a9ba1d8705462081b5ff3ae4e6bbf161eafe219c8ba34fb15cebf3247b70cb7db491cc2a5bd44694f5943b59b3b2b28052dfd3949c97f24bbb59903e08d2cb73eeaad2938d7e1ff4e26a3aa1ddd667b16b34ecff5174b1e11735cfb4b47e2bf8e8edf1e2b947ce2d939985732f87253049b15d4f3", 0x87, 0x80}, &(0x7f00000002c0)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000300)) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000340)=0x8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x1, r1, &(0x7f00000003c0)="931959d40ea24cc557c326dad574daa2a13a434bf5b6f60b8de1679e9c2f94c000f879407a5268acc5f63d2bbe3ecfbf43235f1f6ee22f55a9b3704c29", 0x3d, 0x9, 0x0, 0x2, r1}]) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000480)) setxattr$trusted_overlay_origin(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540), 0x2, 0x3) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x814) syz_open_dev$usbmon(&(0x7f00000006c0), 0x40, 0x200) 04:19:19 executing program 2: r0 = getpgrp(0x0) waitid(0x3, r0, &(0x7f0000000000), 0x1, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) waitid(0x1, r0, &(0x7f0000000140), 0x1, &(0x7f00000001c0)) getpid() write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000580)={0xc5, 0x29, 0x1, {0x3ff, [{{0x10, 0x4, 0x3}, 0x6, 0x4, 0x7, './file0'}, {{0x4, 0x2}, 0x1, 0x80, 0x7, './file0'}, {{0x20, 0x4, 0x6}, 0x7f, 0x7, 0x7, './file0'}, {{0x20, 0x3, 0x6}, 0x7, 0x7, 0x7, './file0'}, {{0x8, 0x3, 0x5}, 0x10001, 0x8, 0x7, './file0'}, {{0x8, 0x1, 0x6}, 0x8000, 0x2, 0x7, './file0'}]}}, 0xc5) 04:19:19 executing program 4: sched_setattr(0xffffffffffffffff, &(0x7f0000000000)={0x38, 0x1, 0x18, 0x81, 0x5, 0x0, 0x0, 0x1f, 0x6, 0x80}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000040)={0x38, 0x5, 0x73, 0x1, 0x3, 0x6, 0x9, 0x8, 0xffffff84, 0xfa}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000080)={0x38, 0x5, 0x40, 0xae22, 0x8, 0x4, 0xb268, 0x3, 0xff, 0x3}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x10000040, 0x8000, 0x2, 0x8, 0x0, 0x0, 0x8000, 0x1}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x2, 0xe, 0x7, 0x82, 0x100000000, 0x7ff, 0x8000000000000000, 0x3}, 0x0) getpid() r0 = getpid() sched_setattr(r0, &(0x7f0000000140)={0x38, 0x3, 0x14, 0x6ca1c65c, 0x1, 0x3, 0x2, 0x6d8, 0x40, 0x100}, 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x8000, 0x50) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x3, 0x0, 0x4, 0x962, 0x3, 0x8, 0x10001, 0x7, 0x1}, 0x0) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000280)=""/155) setpgid(r3, r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4200080}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x8, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 04:19:19 executing program 0: r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x70000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r1, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x68}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x22}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x401}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r2 = syz_open_dev$usbmon(&(0x7f0000000400), 0xb2, 0x80000) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) io_setup(0x0, &(0x7f0000000440)=0x0) io_cancel(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x4, r2, &(0x7f0000000480)="b900dd845382dea2338d268e3b9eb268376ab5", 0x13, 0x1, 0x0, 0x3}, &(0x7f0000000500)) r4 = syz_open_dev$mouse(&(0x7f0000000540), 0x8, 0x244100) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40885}, 0x10) socketpair(0x27, 0x5, 0xffff, &(0x7f00000006c0)) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) socket(0x27, 0xe8e817c5a7242f21, 0x2) 04:19:19 executing program 5: sched_yield() sched_yield() r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9f6, 0x80200) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) prctl$PR_SVE_GET_VL(0x33, 0x1cfa4) sched_yield() ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000280)) sched_yield() ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f00000002c0)={0x3, 0x1, 0x7b8, 0x8, 0x5, 0x4}) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x8010, r0, 0x9) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000340)='\'^\'-[\\\x00', &(0x7f0000000380)=':#{%%\'%:$(],\x00', &(0x7f00000003c0)='@-&\x00'], &(0x7f0000000640)=[&(0x7f0000000440)='/dev/usbmon#\x00', &(0x7f0000000480)='/dev/usbmon#\x00', &(0x7f00000004c0)='/dev/usbmon#\x00', &(0x7f0000000500)='/dev/usbmon#\x00', &(0x7f0000000540)='/dev/usbmon#\x00', &(0x7f0000000580)='/dev/usbmon#\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='/dev/usbmon#\x00']) prctl$PR_SVE_GET_VL(0x33, 0x2b4c) prctl$PR_SVE_GET_VL(0x33, 0x172ca) socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r2, 0x800, 0x0, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan3\x00'}) 04:19:19 executing program 2: r0 = getpgrp(0x0) waitid(0x3, r0, &(0x7f0000000000), 0x1, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) waitid(0x1, r0, &(0x7f0000000140), 0x1, &(0x7f00000001c0)) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000580)={0xc5, 0x29, 0x1, {0x3ff, [{{0x10, 0x4, 0x3}, 0x6, 0x4, 0x7, './file0'}, {{0x4, 0x2}, 0x1, 0x80, 0x7, './file0'}, {{0x20, 0x4, 0x6}, 0x7f, 0x7, 0x7, './file0'}, {{0x20, 0x3, 0x6}, 0x7, 0x7, 0x7, './file0'}, {{0x8, 0x3, 0x5}, 0x10001, 0x8, 0x7, './file0'}, {{0x8, 0x1, 0x6}, 0x8000, 0x2, 0x7, './file0'}]}}, 0xc5) 04:19:19 executing program 7: r0 = getpid() ptrace$poke(0x5, r0, &(0x7f0000000000), 0x2) ptrace$poke(0x5, r0, &(0x7f0000000040), 0x9) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x1, 0x10000023, 0x4, 0x8, 0x6, 0x10001, 0x1, 0x97e, 0xff}, 0x0) wait4(r0, &(0x7f00000000c0), 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x100000000, 0x100) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000140)={0x1, 0x8, 0x5, 0x0, 0x12, "a2917d908593e6a7"}) sched_setattr(r0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x67, 0xe1, 0x1000200000000, 0x8, 0x7, 0x2, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$P9_RREADDIR(r2, &(0x7f0000000200)={0xe4, 0x29, 0x2, {0x1, [{{0x4, 0x2, 0x3}, 0x3, 0x9, 0x7, './file0'}, {{0x40, 0x0, 0x1}, 0x3, 0x7, 0x7, './file0'}, {{0x1, 0x0, 0x6}, 0x7, 0x0, 0x7, './file0'}, {{0x20, 0x4}, 0x400, 0x9, 0x7, './file0'}, {{0x1, 0x3}, 0x20, 0x8, 0x7, './file0'}, {{0x10, 0x2, 0x8}, 0x8000000000, 0x0, 0x7, './file0'}, {{0x0, 0x3, 0x1}, 0x10000, 0xa2, 0x7, './file0'}]}}, 0xe4) syz_open_dev$mouse(&(0x7f0000000300), 0xffffffff, 0x1090c0) getuid() 04:19:19 executing program 4: sched_setattr(0xffffffffffffffff, &(0x7f0000000000)={0x38, 0x1, 0x18, 0x81, 0x5, 0x0, 0x0, 0x1f, 0x6, 0x80}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000040)={0x38, 0x5, 0x73, 0x1, 0x3, 0x6, 0x9, 0x8, 0xffffff84, 0xfa}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000080)={0x38, 0x5, 0x40, 0xae22, 0x8, 0x4, 0xb268, 0x3, 0xff, 0x3}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x10000040, 0x8000, 0x2, 0x8, 0x0, 0x0, 0x8000, 0x1}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x2, 0xe, 0x7, 0x82, 0x100000000, 0x7ff, 0x8000000000000000, 0x3}, 0x0) getpid() r0 = getpid() sched_setattr(r0, &(0x7f0000000140)={0x38, 0x3, 0x14, 0x6ca1c65c, 0x1, 0x3, 0x2, 0x6d8, 0x40, 0x100}, 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x8000, 0x50) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x3, 0x0, 0x4, 0x962, 0x3, 0x8, 0x10001, 0x7, 0x1}, 0x0) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000280)=""/155) setpgid(r3, r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4200080}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x8, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 04:19:19 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x699c1) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000100)) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x10002, 0x51, 0x4}, 0x18) io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x9570, r3, &(0x7f00000001c0)="b78a4f74d3605bd30f56252ec34d7a2051325a9ba1d8705462081b5ff3ae4e6bbf161eafe219c8ba34fb15cebf3247b70cb7db491cc2a5bd44694f5943b59b3b2b28052dfd3949c97f24bbb59903e08d2cb73eeaad2938d7e1ff4e26a3aa1ddd667b16b34ecff5174b1e11735cfb4b47e2bf8e8edf1e2b947ce2d939985732f87253049b15d4f3", 0x87, 0x80}, &(0x7f00000002c0)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000300)) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000340)=0x8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x1, r1, &(0x7f00000003c0)="931959d40ea24cc557c326dad574daa2a13a434bf5b6f60b8de1679e9c2f94c000f879407a5268acc5f63d2bbe3ecfbf43235f1f6ee22f55a9b3704c29", 0x3d, 0x9, 0x0, 0x2, r1}]) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000480)) setxattr$trusted_overlay_origin(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540), 0x2, 0x3) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x814) 04:19:19 executing program 7: r0 = getpid() ptrace$poke(0x5, r0, &(0x7f0000000000), 0x2) ptrace$poke(0x5, r0, &(0x7f0000000040), 0x9) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x1, 0x10000023, 0x4, 0x8, 0x6, 0x10001, 0x1, 0x97e, 0xff}, 0x0) wait4(r0, &(0x7f00000000c0), 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x100000000, 0x100) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000140)={0x1, 0x8, 0x5, 0x0, 0x12, "a2917d908593e6a7"}) sched_setattr(r0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x67, 0xe1, 0x1000200000000, 0x8, 0x7, 0x2, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$P9_RREADDIR(r2, &(0x7f0000000200)={0xe4, 0x29, 0x2, {0x1, [{{0x4, 0x2, 0x3}, 0x3, 0x9, 0x7, './file0'}, {{0x40, 0x0, 0x1}, 0x3, 0x7, 0x7, './file0'}, {{0x1, 0x0, 0x6}, 0x7, 0x0, 0x7, './file0'}, {{0x20, 0x4}, 0x400, 0x9, 0x7, './file0'}, {{0x1, 0x3}, 0x20, 0x8, 0x7, './file0'}, {{0x10, 0x2, 0x8}, 0x8000000000, 0x0, 0x7, './file0'}, {{0x0, 0x3, 0x1}, 0x10000, 0xa2, 0x7, './file0'}]}}, 0xe4) getuid() 04:19:19 executing program 2: r0 = getpgrp(0x0) waitid(0x3, r0, &(0x7f0000000000), 0x1, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000580)={0xc5, 0x29, 0x1, {0x3ff, [{{0x10, 0x4, 0x3}, 0x6, 0x4, 0x7, './file0'}, {{0x4, 0x2}, 0x1, 0x80, 0x7, './file0'}, {{0x20, 0x4, 0x6}, 0x7f, 0x7, 0x7, './file0'}, {{0x20, 0x3, 0x6}, 0x7, 0x7, 0x7, './file0'}, {{0x8, 0x3, 0x5}, 0x10001, 0x8, 0x7, './file0'}, {{0x8, 0x1, 0x6}, 0x8000, 0x2, 0x7, './file0'}]}}, 0xc5) 04:19:19 executing program 0: r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x70000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r1, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x68}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x22}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x401}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r2 = syz_open_dev$usbmon(&(0x7f0000000400), 0xb2, 0x80000) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) io_setup(0x0, &(0x7f0000000440)=0x0) io_cancel(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x4, r2, &(0x7f0000000480)="b900dd845382dea2338d268e3b9eb268376ab5", 0x13, 0x1, 0x0, 0x3}, &(0x7f0000000500)) r4 = syz_open_dev$mouse(&(0x7f0000000540), 0x8, 0x244100) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40885}, 0x10) socketpair(0x27, 0x5, 0xffff, &(0x7f00000006c0)) socket(0x27, 0xe8e817c5a7242f21, 0x2) 04:19:20 executing program 7: r0 = getpid() ptrace$poke(0x5, r0, &(0x7f0000000000), 0x2) ptrace$poke(0x5, r0, &(0x7f0000000040), 0x9) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x1, 0x10000023, 0x4, 0x8, 0x6, 0x10001, 0x1, 0x97e, 0xff}, 0x0) wait4(r0, &(0x7f00000000c0), 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x100000000, 0x100) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000140)={0x1, 0x8, 0x5, 0x0, 0x12, "a2917d908593e6a7"}) sched_setattr(r0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x67, 0xe1, 0x1000200000000, 0x8, 0x7, 0x2, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) getuid() 04:19:20 executing program 6: sched_yield() sched_yield() r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9f6, 0x80200) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) prctl$PR_SVE_GET_VL(0x33, 0x1cfa4) sched_yield() ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000280)) sched_yield() ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f00000002c0)={0x3, 0x1, 0x7b8, 0x8, 0x5, 0x4}) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x8010, r0, 0x9) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000340)='\'^\'-[\\\x00', &(0x7f0000000380)=':#{%%\'%:$(],\x00', &(0x7f00000003c0)='@-&\x00'], &(0x7f0000000640)=[&(0x7f0000000440)='/dev/usbmon#\x00', &(0x7f0000000480)='/dev/usbmon#\x00', &(0x7f00000004c0)='/dev/usbmon#\x00', &(0x7f0000000500)='/dev/usbmon#\x00', &(0x7f0000000540)='/dev/usbmon#\x00', &(0x7f0000000580)='/dev/usbmon#\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='/dev/usbmon#\x00']) prctl$PR_SVE_GET_VL(0x33, 0x2b4c) prctl$PR_SVE_GET_VL(0x33, 0x172ca) socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r2, 0x800, 0x0, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan3\x00'}) 04:19:20 executing program 5: sched_yield() sched_yield() r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9f6, 0x80200) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) prctl$PR_SVE_GET_VL(0x33, 0x1cfa4) sched_yield() ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000280)) sched_yield() ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f00000002c0)={0x3, 0x1, 0x7b8, 0x8, 0x5, 0x4}) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x8010, r0, 0x9) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000340)='\'^\'-[\\\x00', &(0x7f0000000380)=':#{%%\'%:$(],\x00', &(0x7f00000003c0)='@-&\x00'], &(0x7f0000000640)=[&(0x7f0000000440)='/dev/usbmon#\x00', &(0x7f0000000480)='/dev/usbmon#\x00', &(0x7f00000004c0)='/dev/usbmon#\x00', &(0x7f0000000500)='/dev/usbmon#\x00', &(0x7f0000000540)='/dev/usbmon#\x00', &(0x7f0000000580)='/dev/usbmon#\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='/dev/usbmon#\x00']) prctl$PR_SVE_GET_VL(0x33, 0x2b4c) prctl$PR_SVE_GET_VL(0x33, 0x172ca) socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r2, 0x800, 0x0, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan3\x00'}) 04:19:20 executing program 3: sendto(0xffffffffffffffff, &(0x7f0000000000)="3698d5e302bf1832beca91bb33799cbeaf3ac85588bb506c9a0efc482430ef117fa3c43c93d7f3a8a39c0505f5a3608345c409d0c1f887334af5536f83a13338ad7f758f24d27771bb3ee5e21b84eec0854d21", 0x53, 0x800, &(0x7f0000000080)=@phonet={0x23, 0x7, 0xa0, 0x7}, 0x80) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="cecb86f85e88034e777c98b24e375cdad7603c65bd0d754100d663ef0b93d3468128c479e19fa8591590f033713970725769ad169dfa55e216c791aa875db3b1edd57c30d7187c58258d", 0x4a, 0x4000, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) sendto(r0, &(0x7f0000000300)="a29661fd7e2e04bc02ec888c59646191c740403d35c849c0d563fd8ff6f84257bf4263c9f6bb53e9bed24cf9a4aed9b6e013ed00ecb258fb3a1dfbe0bffed68302c006cecf", 0x45, 0x80, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x400c804) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40004) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000081) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x87ac}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x14) r2 = getpgrp(0x0) sched_setattr(r2, &(0x7f0000000800)={0x38, 0x1, 0x2, 0x7, 0x7fffffff, 0x400, 0x1, 0x5, 0x6, 0x80000000}, 0x0) syz_open_dev$mouse(&(0x7f0000000840), 0x9, 0x100) syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000ac0)=@req3={0x3, 0x4, 0x8, 0x1, 0x8, 0x8, 0xffff8000}, 0x1c) 04:19:20 executing program 2: r0 = getpgrp(0x0) waitid(0x3, r0, &(0x7f0000000000), 0x1, &(0x7f0000000080)) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000580)={0xc5, 0x29, 0x1, {0x3ff, [{{0x10, 0x4, 0x3}, 0x6, 0x4, 0x7, './file0'}, {{0x4, 0x2}, 0x1, 0x80, 0x7, './file0'}, {{0x20, 0x4, 0x6}, 0x7f, 0x7, 0x7, './file0'}, {{0x20, 0x3, 0x6}, 0x7, 0x7, 0x7, './file0'}, {{0x8, 0x3, 0x5}, 0x10001, 0x8, 0x7, './file0'}, {{0x8, 0x1, 0x6}, 0x8000, 0x2, 0x7, './file0'}]}}, 0xc5) 04:19:20 executing program 4: sched_setattr(0xffffffffffffffff, &(0x7f0000000000)={0x38, 0x1, 0x18, 0x81, 0x5, 0x0, 0x0, 0x1f, 0x6, 0x80}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000040)={0x38, 0x5, 0x73, 0x1, 0x3, 0x6, 0x9, 0x8, 0xffffff84, 0xfa}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000080)={0x38, 0x5, 0x40, 0xae22, 0x8, 0x4, 0xb268, 0x3, 0xff, 0x3}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x10000040, 0x8000, 0x2, 0x8, 0x0, 0x0, 0x8000, 0x1}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x2, 0xe, 0x7, 0x82, 0x100000000, 0x7ff, 0x8000000000000000, 0x3}, 0x0) getpid() r0 = getpid() sched_setattr(r0, &(0x7f0000000140)={0x38, 0x3, 0x14, 0x6ca1c65c, 0x1, 0x3, 0x2, 0x6d8, 0x40, 0x100}, 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x8000, 0x50) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x3, 0x0, 0x4, 0x962, 0x3, 0x8, 0x10001, 0x7, 0x1}, 0x0) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000280)=""/155) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4200080}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x8, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) VM DIAGNOSIS: 04:19:19 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=1ffff11007019f4a RCX=ffffffff81297e8f RDX=1ffffffff0d9e7d6 RSI=0000000000000008 RDI=ffffffff86cf3eb0 RBP=ffff8880174a3f20 RSP=ffff8880380cfa18 R8 =0000000000000000 R9 =ffffffff86cd3817 R10=fffffbfff0d9a702 R11=0000000000000001 R12=0000000000000002 R13=ffff8880174a3f40 R14=ffffffff86cf3e60 R15=0000000000000004 RIP=ffffffff81297ec5 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555557116400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffdec98d080 CR3=000000000e6da000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 00000000ff000000 0000000000000000 YMM01=0000000000000000 0000000000000000 636f6c63006b6165 6c6d656d6b2f6775 YMM02=0000000000000000 0000000000000000 0000000000ffffff ff00000000000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000031 R11=0000000000000001 R12=0000000000000031 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f93dc3c8000 CR3=0000000015ea0000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 4158388400000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000