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"}], 0x5}) 00:19:51 executing program 3: socket(0x3, 0x80000, 0x1000) connect$tipc(0xffffffffffffffff, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) 00:19:51 executing program 2: socket(0x3, 0x80000, 0x1000) r0 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) connect$tipc(0xffffffffffffffff, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) 00:19:51 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000007700)='/dev/bsg\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000008dc0)={0x101, 0x0, 0x4, 0x4, 0x2, {}, {0x1, 0x0, 0x7f, 0x3, 0x2, 0x2, "17fee347"}, 0x7, 0x1, @fd, 0x9}) 00:19:51 executing program 5: syz_io_uring_complete(0x0) socketpair(0x9, 0x3, 0x9, &(0x7f0000008c00)) 00:19:51 executing program 0: socketpair(0x0, 0x3, 0x9, &(0x7f0000008c00)) 00:19:51 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000007700)='/dev/bsg\x00', 0x100, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000008a40)={&(0x7f00000089c0)=[{0xee20, 0x1200, 0x17, &(0x7f0000007840)="5e350b5ea5823c25ecdf04c8ca846a0d65c8d3da1f2d32"}, {0x200, 0x10, 0x50, &(0x7f0000007880)="169cffb9afab91909479deb07b204aa2dbb62ad5e0d4b841971ad6c3504469bf017a13347ccd54fc6db936d04ed6bb180788a11cfb124c6efbd9315799536d26170de8a55ba44d60df59862fcd1d2d3a"}, {0x3767, 0x400, 0x77, &(0x7f0000007900)="e180d020bb9591e81cf21ceb8c79c14c3b2792152bb85e24cddcaef75f507118e395765a5ae11eb9e1e5326191e7883efa94fece173077b17750dbc86940f23e69b90b8631fbe49e6bd980845dac3ff3afd49a7bacf5521c60b72d0b25f5a69a0fdbcb6c2d6ca1c4f12f26a653ca2f95a06bc8b13934a3"}, {0xfff, 0x3410, 0x20, &(0x7f0000007980)="02e10af06759998296497d62f2c5ba861d40a5b3d85200b5759c4947818cd7fb"}, {0x1, 0x200, 0x1000, &(0x7f00000079c0)="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"}], 0x5}) 00:19:51 executing program 3: connect$tipc(0xffffffffffffffff, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) 00:19:51 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000007700)='/dev/bsg\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000008dc0)={0x101, 0x0, 0x4, 0x4, 0x2, {}, {0x1, 0x0, 0x7f, 0x3, 0x2, 0x2, "17fee347"}, 0x7, 0x1, @fd, 0x9}) 00:19:51 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000007700)='/dev/bsg\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000008dc0)={0x101, 0x0, 0x4, 0x4, 0x2, {}, {0x1, 0x0, 0x7f, 0x3, 0x2, 0x2, "17fee347"}, 0x7, 0x1, @fd, 0x9}) 00:19:51 executing program 0: socketpair(0x0, 0x3, 0x9, &(0x7f0000008c00)) 00:19:51 executing program 5: syz_io_uring_complete(0x0) socketpair(0x9, 0x3, 0x9, &(0x7f0000008c00)) 00:19:51 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000008a40)={&(0x7f00000089c0)=[{0xee20, 0x1200, 0x17, &(0x7f0000007840)="5e350b5ea5823c25ecdf04c8ca846a0d65c8d3da1f2d32"}, {0x200, 0x10, 0x50, &(0x7f0000007880)="169cffb9afab91909479deb07b204aa2dbb62ad5e0d4b841971ad6c3504469bf017a13347ccd54fc6db936d04ed6bb180788a11cfb124c6efbd9315799536d26170de8a55ba44d60df59862fcd1d2d3a"}, {0x3767, 0x400, 0x77, &(0x7f0000007900)="e180d020bb9591e81cf21ceb8c79c14c3b2792152bb85e24cddcaef75f507118e395765a5ae11eb9e1e5326191e7883efa94fece173077b17750dbc86940f23e69b90b8631fbe49e6bd980845dac3ff3afd49a7bacf5521c60b72d0b25f5a69a0fdbcb6c2d6ca1c4f12f26a653ca2f95a06bc8b13934a3"}, {0xfff, 0x3410, 0x20, &(0x7f0000007980)="02e10af06759998296497d62f2c5ba861d40a5b3d85200b5759c4947818cd7fb"}, {0x1, 0x200, 0x1000, &(0x7f00000079c0)="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"}], 0x5}) 00:19:51 executing program 3: connect$tipc(0xffffffffffffffff, 0x0, 0x0) 00:19:52 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000007700)='/dev/bsg\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000008dc0)={0x101, 0x0, 0x4, 0x4, 0x2, {}, {0x1, 0x0, 0x7f, 0x3, 0x2, 0x2, "17fee347"}, 0x7, 0x1, @fd, 0x9}) 00:19:52 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000007700)='/dev/bsg\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000008dc0)={0x101, 0x0, 0x4, 0x4, 0x2, {}, {0x1, 0x0, 0x7f, 0x3, 0x2, 0x2, "17fee347"}, 0x7, 0x1, @fd, 0x9}) 00:19:52 executing program 5: socketpair(0x9, 0x3, 0x9, &(0x7f0000008c00)) 00:19:52 executing program 0: socketpair(0x9, 0x0, 0x9, &(0x7f0000008c00)) 00:19:52 executing program 3: r0 = syz_io_uring_complete(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000007340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000007440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000007400)={&(0x7f0000007380)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb04}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x860}, 0x40880) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000007480)='/dev/bsg\x00', 0x420202, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000007580)={&(0x7f00000074c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000007540)={&(0x7f0000007500)={0x34, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008090}, 0x80) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000007680)={&(0x7f00000075c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000007640)={&(0x7f0000007600)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfea}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffffc}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f00000076c0), 0x4) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000007700)='/dev/bsg\x00', 0x100, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000007800)={&(0x7f0000007740)={0x10, 0x0, 0x0, 0x240400}, 0xc, &(0x7f00000077c0)={&(0x7f0000007780)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40500d0) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000008a40)={&(0x7f00000089c0)=[{0xee20, 0x1200, 0x17, &(0x7f0000007840)="5e350b5ea5823c25ecdf04c8ca846a0d65c8d3da1f2d32"}, {0x200, 0x10, 0x50, &(0x7f0000007880)="169cffb9afab91909479deb07b204aa2dbb62ad5e0d4b841971ad6c3504469bf017a13347ccd54fc6db936d04ed6bb180788a11cfb124c6efbd9315799536d26170de8a55ba44d60df59862fcd1d2d3a"}, {0x3767, 0x400, 0x77, &(0x7f0000007900)="e180d020bb9591e81cf21ceb8c79c14c3b2792152bb85e24cddcaef75f507118e395765a5ae11eb9e1e5326191e7883efa94fece173077b17750dbc86940f23e69b90b8631fbe49e6bd980845dac3ff3afd49a7bacf5521c60b72d0b25f5a69a0fdbcb6c2d6ca1c4f12f26a653ca2f95a06bc8b13934a3"}, {0xfff, 0x3410, 0x20, &(0x7f0000007980)="02e10af06759998296497d62f2c5ba861d40a5b3d85200b5759c4947818cd7fb"}, {0x1, 0x200, 0x1000, &(0x7f00000079c0)="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"}], 0x5}) ioctl$I2C_PEC(r0, 0x708, 0x100) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000008ac0)='gtp\x00', r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000008bc0)={&(0x7f0000008a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000008b80)={&(0x7f0000008b00)={0x58, r4, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20000801) socketpair(0x9, 0x3, 0x9, &(0x7f0000008c00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000008d00)={&(0x7f0000008c40), 0xc, &(0x7f0000008cc0)={&(0x7f0000008c80)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000008d40)={0x100, 0x0, 0x4, 0x74000, 0xfd, {0x77359400}, {0x1, 0x8, 0x80, 0x0, 0xf3, 0x80, "b9e2ac30"}, 0x151a, 0x4, @userptr=0x5, 0x81, 0x0, r2}) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000008dc0)={0x101, 0x0, 0x4, 0x4, 0x2, {}, {0x1, 0x0, 0x7f, 0x3, 0x2, 0x2, "17fee347"}, 0x7, 0x1, @fd, 0x9, 0x0, r6}) read$FUSE(r0, &(0x7f0000008e40)={0x2020}, 0x2020) socket$kcm(0x29, 0x2, 0x0) 00:19:52 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000008a40)={&(0x7f00000089c0)=[{0xee20, 0x1200, 0x17, &(0x7f0000007840)="5e350b5ea5823c25ecdf04c8ca846a0d65c8d3da1f2d32"}, {0x200, 0x10, 0x50, &(0x7f0000007880)="169cffb9afab91909479deb07b204aa2dbb62ad5e0d4b841971ad6c3504469bf017a13347ccd54fc6db936d04ed6bb180788a11cfb124c6efbd9315799536d26170de8a55ba44d60df59862fcd1d2d3a"}, {0x3767, 0x400, 0x77, &(0x7f0000007900)="e180d020bb9591e81cf21ceb8c79c14c3b2792152bb85e24cddcaef75f507118e395765a5ae11eb9e1e5326191e7883efa94fece173077b17750dbc86940f23e69b90b8631fbe49e6bd980845dac3ff3afd49a7bacf5521c60b72d0b25f5a69a0fdbcb6c2d6ca1c4f12f26a653ca2f95a06bc8b13934a3"}, {0xfff, 0x3410, 0x20, &(0x7f0000007980)="02e10af06759998296497d62f2c5ba861d40a5b3d85200b5759c4947818cd7fb"}, {0x1, 0x200, 0x1000, &(0x7f00000079c0)="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"}], 0x5}) 00:19:52 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000007700)='/dev/bsg\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000008dc0)={0x101, 0x0, 0x4, 0x4, 0x2, {}, {0x1, 0x0, 0x7f, 0x3, 0x2, 0x2, "17fee347"}, 0x7, 0x1, @fd, 0x9}) 00:19:52 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000007700)='/dev/bsg\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000008dc0)={0x101, 0x0, 0x4, 0x4, 0x2, {}, {0x1, 0x0, 0x7f, 0x3, 0x2, 0x2, "17fee347"}, 0x7, 0x1, @fd, 0x9}) 00:19:52 executing program 5: socketpair(0x0, 0x3, 0x9, &(0x7f0000008c00)) 00:19:52 executing program 0: socketpair(0x9, 0x0, 0x0, &(0x7f0000008c00)) 00:19:52 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000008a40)={&(0x7f00000089c0)=[{0xee20, 0x1200, 0x17, &(0x7f0000007840)="5e350b5ea5823c25ecdf04c8ca846a0d65c8d3da1f2d32"}, {0x200, 0x10, 0x50, &(0x7f0000007880)="169cffb9afab91909479deb07b204aa2dbb62ad5e0d4b841971ad6c3504469bf017a13347ccd54fc6db936d04ed6bb180788a11cfb124c6efbd9315799536d26170de8a55ba44d60df59862fcd1d2d3a"}, {0x3767, 0x400, 0x77, &(0x7f0000007900)="e180d020bb9591e81cf21ceb8c79c14c3b2792152bb85e24cddcaef75f507118e395765a5ae11eb9e1e5326191e7883efa94fece173077b17750dbc86940f23e69b90b8631fbe49e6bd980845dac3ff3afd49a7bacf5521c60b72d0b25f5a69a0fdbcb6c2d6ca1c4f12f26a653ca2f95a06bc8b13934a3"}, {0xfff, 0x3410, 0x20, &(0x7f0000007980)="02e10af06759998296497d62f2c5ba861d40a5b3d85200b5759c4947818cd7fb"}, {0x1, 0x200, 0x1000, &(0x7f00000079c0)="3c59c0482a343cc943d6450e6fe66ad475c828b1d6b90c669bff045cf23affb7238e618a53f46559023ab802827ac3dcd0bca972c857b62bf215e44b9fe324bc108f25fcdf616c9724973c63585f009f2d2c101f5047cd9a0274bfed5534280db50028cc48ebd58c34f0fa1b1f0c02febd983a928a8d562abc4376fd679947d11676ed04e60dd00b8e5a7e24cc673a0b33e880f29f4a96ef720ceb76c7edb0340fef3beb7f2abf593560b9a69b535d9646c87096e6fa95431bdb883b0daa413b4b3212414d7954f7771bf40f8080c41455fb8eb0e032c07cbe1fe7bea6858a86da4bb7407a79747917add6bd2a17cbf96df0cf05eb772715787d6f437349da74f88eac36facd0313c1329e4e0b76e5f31b47b766ca675929a8479f0f93daf3cf9c49a347de09e213e2fb788366ef8bc3abcaa83fda69906513b1e64a9316f3a18c4cddf414a30de001d3ea9d8d36fefb8061d38ebce0db7fcba0659160c519366f7c02cb3858cf6eb6fd860c5c500e5a644e5495f25ff9be319094487cff65892d8ab568cd9b3f85facce083051affa4b4f1b6d945b284b28c5e7b39ba5e5056fe4fd30c6c6196d2170421162e25127d11bee79a3bf143a3eeabba1488b90c3f7b792a027d6f3990d71aa9a06c855cb88c27fa7b813fb8beb082a2250b641f30edd580ec5c1f266f51589b93b4f9a1eb3e0756dd3621138354e31a0429ccdcbd28949623cf1b0cc880412ea977173ce8aa147a641517ae522d275b3f58e934afcca2cba47c5f2cfe89927d9b24b1b65b34bd4b8552cf713cac6592c101c9e2517e32e7e9e58e42e266c8268293da9880788845fdea9db5f36474152b6c211c3a5540a9fec2f9a91e5611afd577ca9a8eff982dd98545bf6b6ebb5979465b0831e9c6d9a78a58b9fbf8ea9316c23fdb3645d7fd7ebf83c6329adf177f672ad70f34d9ee953ab149a849c8c2d398bafd7d830e6f245339fc9846d7f2774b5732c77e398b3086117e7893e9c7d9208ab7cad7b60bb48fd499f5d34e17103ab356732f792be189514b47182ea76f8d457052186dc82036f30f997c3cce6281652db1db79f2d608f57a48e40e8ab55887622386992a7d1d645e27a3097d3c54b953871abc55c7de6a0e256e2137dbc01dfd89ab5b53acd73cdbea1e70512421af3890a7ebfdc6fec64889e98323bcd8ccc350414d37d3600da4ba5fd50b9acc6e4f900f24be40caeeb1772502c320a2511437820da774651c225265f52142af6b9936d7a3df0be36858a267e63fc069d21eb4fb9106b3111abdcdacdf34262db5e0688223cc1221cc63c705847da5b6652657710868aa7615311549ae592398b1f16dfa85daa87c23a8b296cde34ec759b19616d2cf7e907fcfb008273143d88513e5558d1ed84fce5994c1b3d11d2b39580a64e65270930e03d7a6936862cddd9c6ea2ec7a3481ccc5279d9e52fd8893e33e70c3142ec84b9969f39e23126e65c6de9cb09ba7ec56f436424da9e9c1b072dfae1438d7079628bfa810474240df4dea5f2c47b0cbfdac2c42ba04061dc29a7797fdc933e7124a9d6d03884c88b58aebe5d87007ef6cd524fb8e7f83b10856f9a48a88d3587840de9e80421c09d601e1da4eb123d4911bace5e39145f466c6cef3232932da55a40507f9a8408a4c249ce6e37beb4253fc2495d362c701c53559f0c720b6afd7bfc73c1ab0e9c6d29f7b981a062ba31f348726f883d0ed333ff105275f5fed3c8f176ef0462aa9d08a9b5cef7a59d64a7ac89a9c3ef383b4bb59bd530bde5b1600f474d933384803498ce4527b8d22ddb74d9f6967001dca5b1f7c1210ce6e7e650bfe90159e55ba5a6177fbf39a3f46c32c52bb78439c262f9e94a8642b7b864bc885595de39c1823a159daf6c22952de41ee507fd488b0316557274d7da3db962969111d856c4a7476f08ad4d128625a2eacf7b8e0d3ebd810850f558e6c4e94792d78cad33d059070b6fa52663e679eae00d65c02390660ac3c2dfa8860af7c3a1d3607b3f42df66db9f0e928f923de8e882ab5810d4d9c66ea1eb6dbf8e60e5cf9a16d2e355055457eae08eba4614ee5ca003a523adb092188408f6b47c672997d473a333b876a1795e53343c845def6feadb1b0fdc884862c62a38b73941727a7cfc36ba9641c3d7c89652dabbfde0579f17ee99e6e5aba944cfcf1a254f200fcf88c00b20f3855a557ba8df11630fcd8e2deddf7065170334779831a0ff6cc5484fe51c8b00b852bb281b4f9d51a0d7b5776891df4228787ac4b89d02d2a84d456b24cb2241fd452d25ccf4a680234c7bc0ea5184f88e43905b99c1cc1cb4ecdcf0a27459ac974c020b741e56185d6c6d7628c83afe43f85efd159fd662646bf48199ce286f0c0d984ddc6860cdcbef4223d24768fa48e6b8324d13a44c04c9210773e369739813e5b25a648ce0b0aea78241f368c4af9cf06826064e540ed650c1c44293bbce36f3a6363fd6273577d0f8d2f9902555d3abe170e986c4ae6efa6ee3cfc21656a69a84ee5df70b8acfa0a97c430dfbd0c059d4015046a861b2029da45bb3deaf3d59a78a011d7db19f87fc97933f2003d7d04b7a7c9802e9fed1f0d88ad82a1ae5fada04fcd95d79168927782058409c8d83790ddcbfac98ee6ae90be8c668107da03396e67887bc9ed3b57cf170d439ce662a0ca4daf7301c4dc5a636073b000e02c9ff9e2e0ee1d094512a64d75385d1d254b33c730290a2f24bbfea4a7513e1a7cb1fbacdca815963e1da14d13ec48e7260180a11c3545cf12a7a96fea0694193f544c3394726c434af14b2a0ea8be9194ea91f4dc483983b54c6124c7fd01f4216dc0c7029441c4c10f554a8ae8f9106ac2c413799d908e84c2825c8f700f4e24e6113177fbd310a527fb8999885089208347cceeccb24d6838cc1586243cba0d88e5765350511c5b7c1520c55f72336406bf678370596133b305009d0a9522b0477feda7772c4d9ecf0a503109ce11033913e3e4bc7f612cfd20e621c286523e643b9caa00437f64982e2de7201553d7f5dcc25a8877c2793b0ade4f63e8f3a0ef92e17eac4ce3a3b9526ab2e4e4475ab0ba08d9ac42a10896db5759fb64109eda4508e23ea462a6add8f3c72fd9ea66068228d6607c6c498acfc66ce83e1a44f54ce8a351fd02ddb8c0f8f7cf3f9ad2db710efee3403b4d7236e5f48368df48d6cff279b20e10e541cf11090683f0c57a6b27ee495389dd5ef1dc3b4ac27dee3048d1ef3791b2cba83911001edb9272f52055f2c38de488e45d93c21ac6abaec6cb16d8f8b62b72876f595f80f3433d6eedcab741b55d389fa651dda9ceac97c70322dadbee69ef624c0756fb44533abee0ec388d67d23cdacb2cb69c727760e818839c91b789f8f02effa42dc823925469a623c5216d5aaa536c17daf6b0cb7706b39e7381f68bf36ffddf8de0edab48b9120f1d996cf12b67d40c614492e7a97e4fe06b15d4198a9b5f6022d49ba17ca640d2712453f265393e74ce09dc24d46d0aa3a04eb8c418a2dd0908cea1bb0e42fb5ca416d95c411933a9f8b06c3acbbe51fd1cec854ef4c0ac1e51a08e2b7c9d001c84e232cce4e576624721ffa2c12747cf03e091a67eac05c98432e87f6ed165073507a45a7418241795371be7bf29b5c85e07d8d5d30e6b3b81ac5b9540bba85e127b6b77d4ac3656607414b0fd35ef5ff805776d8eea3039d7ba386f5cda7dbf6a69722c71bfdc77654a683a4cf058e70b9e0cf9376465b4062593faa7b506504edf20c2c506b424e0e8d6ac77cabdf774e17ce96fca19cb8a0e5ab78bde8a24f7d5b5a990f40c0774b091352a35618a3c6b383bfc7c98dddb7247cbfb8d620c5fcc41d23a71bc22e7741200dd18504116f089eb2193205f8a22e0d10097c7931a62c7f4cef7f241f2fc6f914df0c0a7a988b993aeabcb188d3f0a1df4d398fe3fbef51c294c19a783623f687084803ec0e689e0a4d7ada53b32870525e9fea74b6f291c764418ed089e76ddcb5774b70438e55c1a6d0ff3572f09f659ce2898099a554a0cb902efa360f5316533355a6c2361ad46e5b53dd951398f1c242339b381e2d65e6a257bfc54a869b82dcab5511d341b6582bffa53f8bd5e5aa2e21b74f027f057ca27807bb2d45ac6bd8eff067951a8311e653417232544994281ffacd21a1b90c0a8c29a37a622baaeb9651261c418f6984a074bc8ea4f16166deff10ea712072832355052d32fe47f2af4c3e9c432003a15eaeb0b06666a833c1662834b333f8daafb553bee58d8b4353b1511eeba64ccd67f21e0a7b74a5f00de411579e5fa83b72d5c2027b49b43b3041413d87fb889ac3b7c1f03bb0fb157f16213d9ee19e24c7baf17565c72308d9ef6043442bf534e21bca9598520c7b419cdde9426754e1607a4c469d5b5abcb44848fe8490ab9d8548f328b71cf654fb93d9fef4593bd47fd5fd8f3fbb763f32719442861826334a9ade4d4173a1d3500bcf577a933899a55316edf7d870f6a41234dc6faffc305a92cd64714156e1ba07b72f025546874c6a92cd3237989a27a04243fa805c0fa7f7cd3a603fc376e24ce848d36d7d20fb051b402363f6efe798efe08df776cdd385be34c7ae5ebcf78d3e3ab8938b55ef5d3c1b77e31277ab1f8de6dbafe5858350ab0f27a3763d82d11cabb7faf70d34b2fb215d1edabea3c4a79517562936092a0a3ec2242fe4f13d056e512f075ab94af8e20e0d460f36ee2ecfffa813a42d69e90e956f339c3a800bdf9033ab194411d2b3aa675e16f5da2877242d24166a447aee15da84ea90b037aab119523615bb6ce9bfcf64fa310a0c67f931d4063832fe6de19e4b50b3f9643619ea69b513c4823c2a06eafd53938a2529216437df2843b65394bb0a873db7897d3b402b2a9092107ad484bc988c3dc1f370b0aa64e18e3bcf0489dc255fbe7fa9d132a3bf6d4253c5e30c7edbf4103a0f3b997cc62a80f135dd82289736ab5ef60a99fec58ea2f3e133873ead6f1248cdda89eea7618f90551c1b327278313f9fd7ba71bf26cb1d2ad28f0c8eb8ed5e2b217f9781f141a022be85a9adb4bf18c599e94c9b1e473d3d0a26cf213fc9588e64c055f979fb6f58a64107655f12d203e872c3698118ce8c20b2875d8baef785dcf1131b621c5e3840676c0b0721b6d6cc58a6ec2c56e627ca15c52be1edbf9649b425fdd7aba8aaaae4e4006247ab5997669bc129b8643504972530144ca8520f2f4bc0de5a2a8e36822c8a218ccc9c8e02d4a21b6ee101ae417f42d02c4c2a18c8c5642db9593d71297040627b222b3f4530806270cde73533bc4dc9a24497d0148d4e9dba93c767c66c8a9b5b9acd37c53ecfed1888c9b6d4363adc030b0ee23af48192f3244548154136648e24ae0461c6593a2ec1c7fda632d2c4cc2bcffbe752697c612b4cfe5971497701c0cba8427a9cad417514299e7d428d953d003c57ccd249531eeb8bc71e4c5f7a81fc09babfb3358563526b2dfc16f345fe71f96e061414803062025e35686a3766e27cea35c60693797d030f1b30a29c391cf00261c0e65b190a47af170221404eeead947d60e6c9b9b5e0aa1bc22f2237437d4b83f5aa284dc368a0c1b54bf3ecebfd28736da3920491ec4d7806a2a8a0f9b0947d292cf974cb9698e22f8a7aed658c5eee70d1077928926b5a8a5cca7463ff458d637ec0525c2285f7b5b1ffbc2ef1852841d0c9d49ab25519f004b084bc316fa46713a36c1d74b16b73f25570364f0d659513b37"}], 0x5}) 00:19:52 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000007700)='/dev/bsg\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0) 00:19:52 executing program 3: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)={0xffffffffffffffff}) r6 = socket(0x27, 0x4, 0x8000) connect$tipc(r6, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) socketpair(0x4, 0x4, 0x101, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000001e80)={0xffffffffffffffff, r5, 0x6, 0xc4, &(0x7f0000001d80)="27b7d8c5455373ff0efe48df97f118d624362a0446f564a823726329fcd148cf9fdbc0255d8498159837dc14a70229ceb7c0b887e8a0a37be6bb13932468f54bf4b701322bccdbb2bad597bdea19825ae26dcde6fa106363bfc3b349c576feb7eb6c7859555c7b9e10b98deee408f19112d57f28916b61280a6303b385920cd33af82ea5107612d9b6fd62128708f115ffc4310b1752e69ee37b7de96404e269fb0cf12bc9a6c76c44bdf9d74be3e7b48bfca374899ddfccf55a8dc46e372809cfd1383d", 0x0, 0x2, 0x8001, 0xff, 0x5, 0x3, 0x5, 'syz0\x00'}) r8 = syz_io_uring_complete(0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r8, 0x800448d3, &(0x7f0000001f40)={@fixed={[], 0x10}, 0x7, 0x7f, 0x6, 0xffce, 0x81, "2dc16e697b315b31d6a9f8014651905d2c1c152138ace17cf58dd72d5fca665041d5f4cfa2b3e575e6f9909926531d4806a8d1a6961d1965f5bd3517437fd60667320b34bb4b02ff03ba741a9646920a7f8466b1b2036396081ef6dbac69f5e38f52bb5f19ed28f801cc5520d97ad284ab3eb6991833d55a61f5e551799b2814"}) 00:19:52 executing program 2: ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000008dc0)={0x101, 0x0, 0x4, 0x4, 0x2, {}, {0x1, 0x0, 0x7f, 0x3, 0x2, 0x2, "17fee347"}, 0x7, 0x1, @fd, 0x9}) 00:19:52 executing program 5: socketpair(0x0, 0x3, 0x9, &(0x7f0000008c00)) 00:19:52 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000007700)='/dev/bsg\x00', 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000008a40)={&(0x7f00000089c0)=[{0xee20, 0x1200, 0x17, &(0x7f0000007840)="5e350b5ea5823c25ecdf04c8ca846a0d65c8d3da1f2d32"}, {0x200, 0x10, 0x50, &(0x7f0000007880)="169cffb9afab91909479deb07b204aa2dbb62ad5e0d4b841971ad6c3504469bf017a13347ccd54fc6db936d04ed6bb180788a11cfb124c6efbd9315799536d26170de8a55ba44d60df59862fcd1d2d3a"}, {0x3767, 0x400, 0x77, &(0x7f0000007900)="e180d020bb9591e81cf21ceb8c79c14c3b2792152bb85e24cddcaef75f507118e395765a5ae11eb9e1e5326191e7883efa94fece173077b17750dbc86940f23e69b90b8631fbe49e6bd980845dac3ff3afd49a7bacf5521c60b72d0b25f5a69a0fdbcb6c2d6ca1c4f12f26a653ca2f95a06bc8b13934a3"}, {0xfff, 0x3410, 0x20, &(0x7f0000007980)="02e10af06759998296497d62f2c5ba861d40a5b3d85200b5759c4947818cd7fb"}, {0x1, 0x200, 0x1000, &(0x7f00000079c0)="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"}], 0x5}) 00:19:52 executing program 0: socketpair(0x9, 0x0, 0x0, 0x0) 00:19:52 executing program 2: ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000008dc0)={0x101, 0x0, 0x4, 0x4, 0x2, {}, {0x1, 0x0, 0x7f, 0x3, 0x2, 0x2, "17fee347"}, 0x7, 0x1, @fd, 0x9}) 00:19:52 executing program 1: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)={0xffffffffffffffff}) r6 = socket(0x27, 0x4, 0x8000) connect$tipc(r6, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) socketpair(0x4, 0x4, 0x101, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000001e80)={0xffffffffffffffff, r5, 0x6, 0xc4, &(0x7f0000001d80)="27b7d8c5455373ff0efe48df97f118d624362a0446f564a823726329fcd148cf9fdbc0255d8498159837dc14a70229ceb7c0b887e8a0a37be6bb13932468f54bf4b701322bccdbb2bad597bdea19825ae26dcde6fa106363bfc3b349c576feb7eb6c7859555c7b9e10b98deee408f19112d57f28916b61280a6303b385920cd33af82ea5107612d9b6fd62128708f115ffc4310b1752e69ee37b7de96404e269fb0cf12bc9a6c76c44bdf9d74be3e7b48bfca374899ddfccf55a8dc46e372809cfd1383d", 0x0, 0x2, 0x8001, 0xff, 0x5, 0x3, 0x5, 'syz0\x00'}) r8 = syz_io_uring_complete(0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r8, 0x800448d3, &(0x7f0000001f40)={@fixed={[], 0x10}, 0x7, 0x7f, 0x6, 0xffce, 0x81, "2dc16e697b315b31d6a9f8014651905d2c1c152138ace17cf58dd72d5fca665041d5f4cfa2b3e575e6f9909926531d4806a8d1a6961d1965f5bd3517437fd60667320b34bb4b02ff03ba741a9646920a7f8466b1b2036396081ef6dbac69f5e38f52bb5f19ed28f801cc5520d97ad284ab3eb6991833d55a61f5e551799b2814"}) 00:19:52 executing program 5: socketpair(0x0, 0x3, 0x9, &(0x7f0000008c00)) 00:19:52 executing program 3: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)={0xffffffffffffffff}) r6 = socket(0x27, 0x4, 0x8000) connect$tipc(r6, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) socketpair(0x4, 0x4, 0x101, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000001e80)={0xffffffffffffffff, r5, 0x6, 0xc4, &(0x7f0000001d80)="27b7d8c5455373ff0efe48df97f118d624362a0446f564a823726329fcd148cf9fdbc0255d8498159837dc14a70229ceb7c0b887e8a0a37be6bb13932468f54bf4b701322bccdbb2bad597bdea19825ae26dcde6fa106363bfc3b349c576feb7eb6c7859555c7b9e10b98deee408f19112d57f28916b61280a6303b385920cd33af82ea5107612d9b6fd62128708f115ffc4310b1752e69ee37b7de96404e269fb0cf12bc9a6c76c44bdf9d74be3e7b48bfca374899ddfccf55a8dc46e372809cfd1383d", 0x0, 0x2, 0x8001, 0xff, 0x5, 0x3, 0x5, 'syz0\x00'}) r8 = syz_io_uring_complete(0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r8, 0x800448d3, &(0x7f0000001f40)={@fixed={[], 0x10}, 0x7, 0x7f, 0x6, 0xffce, 0x81, "2dc16e697b315b31d6a9f8014651905d2c1c152138ace17cf58dd72d5fca665041d5f4cfa2b3e575e6f9909926531d4806a8d1a6961d1965f5bd3517437fd60667320b34bb4b02ff03ba741a9646920a7f8466b1b2036396081ef6dbac69f5e38f52bb5f19ed28f801cc5520d97ad284ab3eb6991833d55a61f5e551799b2814"}) 00:19:52 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000007700)='/dev/bsg\x00', 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000008a40)={&(0x7f00000089c0)=[{0xee20, 0x1200, 0x17, &(0x7f0000007840)="5e350b5ea5823c25ecdf04c8ca846a0d65c8d3da1f2d32"}, {0x200, 0x10, 0x50, &(0x7f0000007880)="169cffb9afab91909479deb07b204aa2dbb62ad5e0d4b841971ad6c3504469bf017a13347ccd54fc6db936d04ed6bb180788a11cfb124c6efbd9315799536d26170de8a55ba44d60df59862fcd1d2d3a"}, {0x3767, 0x400, 0x77, &(0x7f0000007900)="e180d020bb9591e81cf21ceb8c79c14c3b2792152bb85e24cddcaef75f507118e395765a5ae11eb9e1e5326191e7883efa94fece173077b17750dbc86940f23e69b90b8631fbe49e6bd980845dac3ff3afd49a7bacf5521c60b72d0b25f5a69a0fdbcb6c2d6ca1c4f12f26a653ca2f95a06bc8b13934a3"}, {0xfff, 0x3410, 0x20, &(0x7f0000007980)="02e10af06759998296497d62f2c5ba861d40a5b3d85200b5759c4947818cd7fb"}, {0x1, 0x200, 0x1000, &(0x7f00000079c0)="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"}], 0x5}) 00:19:52 executing program 0: socketpair(0x9, 0x0, 0x0, 0x0) 00:19:52 executing program 2: ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000008dc0)={0x101, 0x0, 0x4, 0x4, 0x2, {}, {0x1, 0x0, 0x7f, 0x3, 0x2, 0x2, "17fee347"}, 0x7, 0x1, @fd, 0x9}) 00:19:52 executing program 1: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)={0xffffffffffffffff}) r6 = socket(0x27, 0x4, 0x8000) connect$tipc(r6, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) socketpair(0x4, 0x4, 0x101, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000001e80)={0xffffffffffffffff, r5, 0x6, 0xc4, &(0x7f0000001d80)="27b7d8c5455373ff0efe48df97f118d624362a0446f564a823726329fcd148cf9fdbc0255d8498159837dc14a70229ceb7c0b887e8a0a37be6bb13932468f54bf4b701322bccdbb2bad597bdea19825ae26dcde6fa106363bfc3b349c576feb7eb6c7859555c7b9e10b98deee408f19112d57f28916b61280a6303b385920cd33af82ea5107612d9b6fd62128708f115ffc4310b1752e69ee37b7de96404e269fb0cf12bc9a6c76c44bdf9d74be3e7b48bfca374899ddfccf55a8dc46e372809cfd1383d", 0x0, 0x2, 0x8001, 0xff, 0x5, 0x3, 0x5, 'syz0\x00'}) r8 = syz_io_uring_complete(0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r8, 0x800448d3, &(0x7f0000001f40)={@fixed={[], 0x10}, 0x7, 0x7f, 0x6, 0xffce, 0x81, "2dc16e697b315b31d6a9f8014651905d2c1c152138ace17cf58dd72d5fca665041d5f4cfa2b3e575e6f9909926531d4806a8d1a6961d1965f5bd3517437fd60667320b34bb4b02ff03ba741a9646920a7f8466b1b2036396081ef6dbac69f5e38f52bb5f19ed28f801cc5520d97ad284ab3eb6991833d55a61f5e551799b2814"}) 00:19:52 executing program 5: socketpair(0x9, 0x0, 0x9, &(0x7f0000008c00)) 00:19:52 executing program 0: socketpair(0x9, 0x0, 0x0, 0x0) 00:19:52 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000007700)='/dev/bsg\x00', 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000008a40)={&(0x7f00000089c0)=[{0xee20, 0x1200, 0x17, &(0x7f0000007840)="5e350b5ea5823c25ecdf04c8ca846a0d65c8d3da1f2d32"}, {0x200, 0x10, 0x50, &(0x7f0000007880)="169cffb9afab91909479deb07b204aa2dbb62ad5e0d4b841971ad6c3504469bf017a13347ccd54fc6db936d04ed6bb180788a11cfb124c6efbd9315799536d26170de8a55ba44d60df59862fcd1d2d3a"}, {0x3767, 0x400, 0x77, &(0x7f0000007900)="e180d020bb9591e81cf21ceb8c79c14c3b2792152bb85e24cddcaef75f507118e395765a5ae11eb9e1e5326191e7883efa94fece173077b17750dbc86940f23e69b90b8631fbe49e6bd980845dac3ff3afd49a7bacf5521c60b72d0b25f5a69a0fdbcb6c2d6ca1c4f12f26a653ca2f95a06bc8b13934a3"}, {0xfff, 0x3410, 0x20, &(0x7f0000007980)="02e10af06759998296497d62f2c5ba861d40a5b3d85200b5759c4947818cd7fb"}, {0x1, 0x200, 0x1000, &(0x7f00000079c0)="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"}], 0x5}) 00:19:52 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000008dc0)={0x101, 0x0, 0x4, 0x4, 0x2, {}, {0x1, 0x0, 0x7f, 0x3, 0x2, 0x2, "17fee347"}, 0x7, 0x1, @fd, 0x9}) 00:19:52 executing program 3: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)={0xffffffffffffffff}) r6 = socket(0x27, 0x4, 0x8000) connect$tipc(r6, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) socketpair(0x4, 0x4, 0x101, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000001e80)={0xffffffffffffffff, r5, 0x6, 0xc4, &(0x7f0000001d80)="27b7d8c5455373ff0efe48df97f118d624362a0446f564a823726329fcd148cf9fdbc0255d8498159837dc14a70229ceb7c0b887e8a0a37be6bb13932468f54bf4b701322bccdbb2bad597bdea19825ae26dcde6fa106363bfc3b349c576feb7eb6c7859555c7b9e10b98deee408f19112d57f28916b61280a6303b385920cd33af82ea5107612d9b6fd62128708f115ffc4310b1752e69ee37b7de96404e269fb0cf12bc9a6c76c44bdf9d74be3e7b48bfca374899ddfccf55a8dc46e372809cfd1383d", 0x0, 0x2, 0x8001, 0xff, 0x5, 0x3, 0x5, 'syz0\x00'}) r8 = syz_io_uring_complete(0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r8, 0x800448d3, &(0x7f0000001f40)={@fixed={[], 0x10}, 0x7, 0x7f, 0x6, 0xffce, 0x81, "2dc16e697b315b31d6a9f8014651905d2c1c152138ace17cf58dd72d5fca665041d5f4cfa2b3e575e6f9909926531d4806a8d1a6961d1965f5bd3517437fd60667320b34bb4b02ff03ba741a9646920a7f8466b1b2036396081ef6dbac69f5e38f52bb5f19ed28f801cc5520d97ad284ab3eb6991833d55a61f5e551799b2814"}) 00:19:52 executing program 0: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)={0xffffffffffffffff}) r6 = socket(0x27, 0x4, 0x8000) connect$tipc(r6, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) socketpair(0x4, 0x4, 0x101, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000001e80)={0xffffffffffffffff, r5, 0x6, 0xc4, &(0x7f0000001d80)="27b7d8c5455373ff0efe48df97f118d624362a0446f564a823726329fcd148cf9fdbc0255d8498159837dc14a70229ceb7c0b887e8a0a37be6bb13932468f54bf4b701322bccdbb2bad597bdea19825ae26dcde6fa106363bfc3b349c576feb7eb6c7859555c7b9e10b98deee408f19112d57f28916b61280a6303b385920cd33af82ea5107612d9b6fd62128708f115ffc4310b1752e69ee37b7de96404e269fb0cf12bc9a6c76c44bdf9d74be3e7b48bfca374899ddfccf55a8dc46e372809cfd1383d", 0x0, 0x2, 0x8001, 0xff, 0x5, 0x3, 0x5, 'syz0\x00'}) r8 = syz_io_uring_complete(0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r8, 0x800448d3, &(0x7f0000001f40)={@fixed={[], 0x10}, 0x7, 0x7f, 0x6, 0xffce, 0x81, "2dc16e697b315b31d6a9f8014651905d2c1c152138ace17cf58dd72d5fca665041d5f4cfa2b3e575e6f9909926531d4806a8d1a6961d1965f5bd3517437fd60667320b34bb4b02ff03ba741a9646920a7f8466b1b2036396081ef6dbac69f5e38f52bb5f19ed28f801cc5520d97ad284ab3eb6991833d55a61f5e551799b2814"}) 00:19:53 executing program 5: socketpair(0x9, 0x0, 0x0, &(0x7f0000008c00)) 00:19:53 executing program 1: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)={0xffffffffffffffff}) r6 = socket(0x27, 0x4, 0x8000) connect$tipc(r6, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) socketpair(0x4, 0x4, 0x101, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000001e80)={0xffffffffffffffff, r5, 0x6, 0xc4, &(0x7f0000001d80)="27b7d8c5455373ff0efe48df97f118d624362a0446f564a823726329fcd148cf9fdbc0255d8498159837dc14a70229ceb7c0b887e8a0a37be6bb13932468f54bf4b701322bccdbb2bad597bdea19825ae26dcde6fa106363bfc3b349c576feb7eb6c7859555c7b9e10b98deee408f19112d57f28916b61280a6303b385920cd33af82ea5107612d9b6fd62128708f115ffc4310b1752e69ee37b7de96404e269fb0cf12bc9a6c76c44bdf9d74be3e7b48bfca374899ddfccf55a8dc46e372809cfd1383d", 0x0, 0x2, 0x8001, 0xff, 0x5, 0x3, 0x5, 'syz0\x00'}) r8 = syz_io_uring_complete(0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r8, 0x800448d3, &(0x7f0000001f40)={@fixed={[], 0x10}, 0x7, 0x7f, 0x6, 0xffce, 0x81, "2dc16e697b315b31d6a9f8014651905d2c1c152138ace17cf58dd72d5fca665041d5f4cfa2b3e575e6f9909926531d4806a8d1a6961d1965f5bd3517437fd60667320b34bb4b02ff03ba741a9646920a7f8466b1b2036396081ef6dbac69f5e38f52bb5f19ed28f801cc5520d97ad284ab3eb6991833d55a61f5e551799b2814"}) 00:19:53 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000007700)='/dev/bsg\x00', 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000008a40)={&(0x7f00000089c0)=[{0xee20, 0x1200, 0x17, &(0x7f0000007840)="5e350b5ea5823c25ecdf04c8ca846a0d65c8d3da1f2d32"}, {0x200, 0x10, 0x50, &(0x7f0000007880)="169cffb9afab91909479deb07b204aa2dbb62ad5e0d4b841971ad6c3504469bf017a13347ccd54fc6db936d04ed6bb180788a11cfb124c6efbd9315799536d26170de8a55ba44d60df59862fcd1d2d3a"}, {0x3767, 0x400, 0x77, &(0x7f0000007900)="e180d020bb9591e81cf21ceb8c79c14c3b2792152bb85e24cddcaef75f507118e395765a5ae11eb9e1e5326191e7883efa94fece173077b17750dbc86940f23e69b90b8631fbe49e6bd980845dac3ff3afd49a7bacf5521c60b72d0b25f5a69a0fdbcb6c2d6ca1c4f12f26a653ca2f95a06bc8b13934a3"}, {0xfff, 0x3410, 0x20, &(0x7f0000007980)="02e10af06759998296497d62f2c5ba861d40a5b3d85200b5759c4947818cd7fb"}, {0x1, 0x200, 0x1000, &(0x7f00000079c0)="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"}], 0x5}) 00:19:53 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000008dc0)={0x101, 0x0, 0x4, 0x4, 0x2, {}, {0x1, 0x0, 0x7f, 0x3, 0x2, 0x2, "17fee347"}, 0x7, 0x1, @fd, 0x9}) 00:19:53 executing program 5: socketpair(0x9, 0x0, 0x0, 0x0) 00:19:53 executing program 3: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)={0xffffffffffffffff}) r6 = socket(0x27, 0x4, 0x8000) connect$tipc(r6, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) socketpair(0x4, 0x4, 0x101, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000001e80)={0xffffffffffffffff, r5, 0x6, 0xc4, &(0x7f0000001d80)="27b7d8c5455373ff0efe48df97f118d624362a0446f564a823726329fcd148cf9fdbc0255d8498159837dc14a70229ceb7c0b887e8a0a37be6bb13932468f54bf4b701322bccdbb2bad597bdea19825ae26dcde6fa106363bfc3b349c576feb7eb6c7859555c7b9e10b98deee408f19112d57f28916b61280a6303b385920cd33af82ea5107612d9b6fd62128708f115ffc4310b1752e69ee37b7de96404e269fb0cf12bc9a6c76c44bdf9d74be3e7b48bfca374899ddfccf55a8dc46e372809cfd1383d", 0x0, 0x2, 0x8001, 0xff, 0x5, 0x3, 0x5, 'syz0\x00'}) syz_io_uring_complete(0x0) 00:19:53 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000007700)='/dev/bsg\x00', 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, 0x0) 00:19:53 executing program 0: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)={0xffffffffffffffff}) r6 = socket(0x27, 0x4, 0x8000) connect$tipc(r6, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) socketpair(0x4, 0x4, 0x101, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000001e80)={0xffffffffffffffff, r5, 0x6, 0xc4, &(0x7f0000001d80)="27b7d8c5455373ff0efe48df97f118d624362a0446f564a823726329fcd148cf9fdbc0255d8498159837dc14a70229ceb7c0b887e8a0a37be6bb13932468f54bf4b701322bccdbb2bad597bdea19825ae26dcde6fa106363bfc3b349c576feb7eb6c7859555c7b9e10b98deee408f19112d57f28916b61280a6303b385920cd33af82ea5107612d9b6fd62128708f115ffc4310b1752e69ee37b7de96404e269fb0cf12bc9a6c76c44bdf9d74be3e7b48bfca374899ddfccf55a8dc46e372809cfd1383d", 0x0, 0x2, 0x8001, 0xff, 0x5, 0x3, 0x5, 'syz0\x00'}) r8 = syz_io_uring_complete(0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r8, 0x800448d3, &(0x7f0000001f40)={@fixed={[], 0x10}, 0x7, 0x7f, 0x6, 0xffce, 0x81, "2dc16e697b315b31d6a9f8014651905d2c1c152138ace17cf58dd72d5fca665041d5f4cfa2b3e575e6f9909926531d4806a8d1a6961d1965f5bd3517437fd60667320b34bb4b02ff03ba741a9646920a7f8466b1b2036396081ef6dbac69f5e38f52bb5f19ed28f801cc5520d97ad284ab3eb6991833d55a61f5e551799b2814"}) 00:19:53 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000008dc0)={0x101, 0x0, 0x4, 0x4, 0x2, {}, {0x1, 0x0, 0x7f, 0x3, 0x2, 0x2, "17fee347"}, 0x7, 0x1, @fd, 0x9}) 00:19:53 executing program 5: socketpair(0x9, 0x0, 0x0, 0x0) 00:19:53 executing program 1: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)={0xffffffffffffffff}) r6 = socket(0x27, 0x4, 0x8000) connect$tipc(r6, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) socketpair(0x4, 0x4, 0x101, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000001e80)={0xffffffffffffffff, r5, 0x6, 0xc4, &(0x7f0000001d80)="27b7d8c5455373ff0efe48df97f118d624362a0446f564a823726329fcd148cf9fdbc0255d8498159837dc14a70229ceb7c0b887e8a0a37be6bb13932468f54bf4b701322bccdbb2bad597bdea19825ae26dcde6fa106363bfc3b349c576feb7eb6c7859555c7b9e10b98deee408f19112d57f28916b61280a6303b385920cd33af82ea5107612d9b6fd62128708f115ffc4310b1752e69ee37b7de96404e269fb0cf12bc9a6c76c44bdf9d74be3e7b48bfca374899ddfccf55a8dc46e372809cfd1383d", 0x0, 0x2, 0x8001, 0xff, 0x5, 0x3, 0x5, 'syz0\x00'}) syz_io_uring_complete(0x0) 00:19:53 executing program 3: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)={0xffffffffffffffff}) r6 = socket(0x27, 0x4, 0x8000) connect$tipc(r6, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) socketpair(0x4, 0x4, 0x101, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000001e80)={0xffffffffffffffff, r5, 0x6, 0xc4, &(0x7f0000001d80)="27b7d8c5455373ff0efe48df97f118d624362a0446f564a823726329fcd148cf9fdbc0255d8498159837dc14a70229ceb7c0b887e8a0a37be6bb13932468f54bf4b701322bccdbb2bad597bdea19825ae26dcde6fa106363bfc3b349c576feb7eb6c7859555c7b9e10b98deee408f19112d57f28916b61280a6303b385920cd33af82ea5107612d9b6fd62128708f115ffc4310b1752e69ee37b7de96404e269fb0cf12bc9a6c76c44bdf9d74be3e7b48bfca374899ddfccf55a8dc46e372809cfd1383d", 0x0, 0x2, 0x8001, 0xff, 0x5, 0x3, 0x5, 'syz0\x00'}) 00:19:53 executing program 4: socketpair(0x9, 0x0, 0x9, &(0x7f0000008c00)) 00:19:53 executing program 5: socketpair(0x9, 0x0, 0x0, 0x0) 00:19:53 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f0000007700)='/dev/bsg\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000008dc0)={0x101, 0x0, 0x4, 0x4, 0x2, {}, {0x1, 0x0, 0x7f, 0x3, 0x2, 0x2, "17fee347"}, 0x7, 0x1, @fd, 0x9}) 00:19:53 executing program 0: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)={0xffffffffffffffff}) r6 = socket(0x27, 0x4, 0x8000) connect$tipc(r6, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) socketpair(0x4, 0x4, 0x101, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000001e80)={0xffffffffffffffff, r5, 0x6, 0xc4, &(0x7f0000001d80)="27b7d8c5455373ff0efe48df97f118d624362a0446f564a823726329fcd148cf9fdbc0255d8498159837dc14a70229ceb7c0b887e8a0a37be6bb13932468f54bf4b701322bccdbb2bad597bdea19825ae26dcde6fa106363bfc3b349c576feb7eb6c7859555c7b9e10b98deee408f19112d57f28916b61280a6303b385920cd33af82ea5107612d9b6fd62128708f115ffc4310b1752e69ee37b7de96404e269fb0cf12bc9a6c76c44bdf9d74be3e7b48bfca374899ddfccf55a8dc46e372809cfd1383d", 0x0, 0x2, 0x8001, 0xff, 0x5, 0x3, 0x5, 'syz0\x00'}) r8 = syz_io_uring_complete(0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r8, 0x800448d3, &(0x7f0000001f40)={@fixed={[], 0x10}, 0x7, 0x7f, 0x6, 0xffce, 0x81, "2dc16e697b315b31d6a9f8014651905d2c1c152138ace17cf58dd72d5fca665041d5f4cfa2b3e575e6f9909926531d4806a8d1a6961d1965f5bd3517437fd60667320b34bb4b02ff03ba741a9646920a7f8466b1b2036396081ef6dbac69f5e38f52bb5f19ed28f801cc5520d97ad284ab3eb6991833d55a61f5e551799b2814"}) 00:19:53 executing program 1: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)={0xffffffffffffffff}) r6 = socket(0x27, 0x4, 0x8000) connect$tipc(r6, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) socketpair(0x4, 0x4, 0x101, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000001e80)={0xffffffffffffffff, r5, 0x6, 0xc4, &(0x7f0000001d80)="27b7d8c5455373ff0efe48df97f118d624362a0446f564a823726329fcd148cf9fdbc0255d8498159837dc14a70229ceb7c0b887e8a0a37be6bb13932468f54bf4b701322bccdbb2bad597bdea19825ae26dcde6fa106363bfc3b349c576feb7eb6c7859555c7b9e10b98deee408f19112d57f28916b61280a6303b385920cd33af82ea5107612d9b6fd62128708f115ffc4310b1752e69ee37b7de96404e269fb0cf12bc9a6c76c44bdf9d74be3e7b48bfca374899ddfccf55a8dc46e372809cfd1383d", 0x0, 0x2, 0x8001, 0xff, 0x5, 0x3, 0x5, 'syz0\x00'}) 00:19:53 executing program 4: socketpair(0x9, 0x0, 0x9, &(0x7f0000008c00)) 00:19:53 executing program 3: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)) r5 = socket(0x27, 0x4, 0x8000) connect$tipc(r5, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) socketpair(0x4, 0x4, 0x101, &(0x7f0000001d40)) 00:19:53 executing program 5: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)={0xffffffffffffffff}) r6 = socket(0x27, 0x4, 0x8000) connect$tipc(r6, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) socketpair(0x4, 0x4, 0x101, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000001e80)={0xffffffffffffffff, r5, 0x6, 0xc4, &(0x7f0000001d80)="27b7d8c5455373ff0efe48df97f118d624362a0446f564a823726329fcd148cf9fdbc0255d8498159837dc14a70229ceb7c0b887e8a0a37be6bb13932468f54bf4b701322bccdbb2bad597bdea19825ae26dcde6fa106363bfc3b349c576feb7eb6c7859555c7b9e10b98deee408f19112d57f28916b61280a6303b385920cd33af82ea5107612d9b6fd62128708f115ffc4310b1752e69ee37b7de96404e269fb0cf12bc9a6c76c44bdf9d74be3e7b48bfca374899ddfccf55a8dc46e372809cfd1383d", 0x0, 0x2, 0x8001, 0xff, 0x5, 0x3, 0x5, 'syz0\x00'}) r8 = syz_io_uring_complete(0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r8, 0x800448d3, &(0x7f0000001f40)={@fixed={[], 0x10}, 0x7, 0x7f, 0x6, 0xffce, 0x81, "2dc16e697b315b31d6a9f8014651905d2c1c152138ace17cf58dd72d5fca665041d5f4cfa2b3e575e6f9909926531d4806a8d1a6961d1965f5bd3517437fd60667320b34bb4b02ff03ba741a9646920a7f8466b1b2036396081ef6dbac69f5e38f52bb5f19ed28f801cc5520d97ad284ab3eb6991833d55a61f5e551799b2814"}) 00:19:53 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f0000007700)='/dev/bsg\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000008dc0)={0x101, 0x0, 0x4, 0x4, 0x2, {}, {0x1, 0x0, 0x7f, 0x3, 0x2, 0x2, "17fee347"}, 0x7, 0x1, @fd, 0x9}) 00:19:53 executing program 0: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)={0xffffffffffffffff}) r6 = socket(0x27, 0x4, 0x8000) connect$tipc(r6, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) socketpair(0x4, 0x4, 0x101, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000001e80)={0xffffffffffffffff, r5, 0x6, 0xc4, &(0x7f0000001d80)="27b7d8c5455373ff0efe48df97f118d624362a0446f564a823726329fcd148cf9fdbc0255d8498159837dc14a70229ceb7c0b887e8a0a37be6bb13932468f54bf4b701322bccdbb2bad597bdea19825ae26dcde6fa106363bfc3b349c576feb7eb6c7859555c7b9e10b98deee408f19112d57f28916b61280a6303b385920cd33af82ea5107612d9b6fd62128708f115ffc4310b1752e69ee37b7de96404e269fb0cf12bc9a6c76c44bdf9d74be3e7b48bfca374899ddfccf55a8dc46e372809cfd1383d", 0x0, 0x2, 0x8001, 0xff, 0x5, 0x3, 0x5, 'syz0\x00'}) syz_io_uring_complete(0x0) 00:19:53 executing program 4: socketpair(0x9, 0x0, 0x9, &(0x7f0000008c00)) 00:19:53 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f0000007700)='/dev/bsg\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000008dc0)={0x101, 0x0, 0x4, 0x4, 0x2, {}, {0x1, 0x0, 0x7f, 0x3, 0x2, 0x2, "17fee347"}, 0x7, 0x1, @fd, 0x9}) 00:19:53 executing program 1: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)) r5 = socket(0x27, 0x4, 0x8000) connect$tipc(r5, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) socketpair(0x4, 0x4, 0x101, &(0x7f0000001d40)) 00:19:53 executing program 0: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)={0xffffffffffffffff}) r6 = socket(0x27, 0x4, 0x8000) connect$tipc(r6, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) socketpair(0x4, 0x4, 0x101, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000001e80)={0xffffffffffffffff, r5, 0x6, 0xc4, &(0x7f0000001d80)="27b7d8c5455373ff0efe48df97f118d624362a0446f564a823726329fcd148cf9fdbc0255d8498159837dc14a70229ceb7c0b887e8a0a37be6bb13932468f54bf4b701322bccdbb2bad597bdea19825ae26dcde6fa106363bfc3b349c576feb7eb6c7859555c7b9e10b98deee408f19112d57f28916b61280a6303b385920cd33af82ea5107612d9b6fd62128708f115ffc4310b1752e69ee37b7de96404e269fb0cf12bc9a6c76c44bdf9d74be3e7b48bfca374899ddfccf55a8dc46e372809cfd1383d", 0x0, 0x2, 0x8001, 0xff, 0x5, 0x3, 0x5, 'syz0\x00'}) 00:19:53 executing program 3: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)) r5 = socket(0x27, 0x4, 0x8000) connect$tipc(r5, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) 00:19:53 executing program 5: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)={0xffffffffffffffff}) r6 = socket(0x27, 0x4, 0x8000) connect$tipc(r6, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) socketpair(0x4, 0x4, 0x101, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000001e80)={0xffffffffffffffff, r5, 0x6, 0xc4, &(0x7f0000001d80)="27b7d8c5455373ff0efe48df97f118d624362a0446f564a823726329fcd148cf9fdbc0255d8498159837dc14a70229ceb7c0b887e8a0a37be6bb13932468f54bf4b701322bccdbb2bad597bdea19825ae26dcde6fa106363bfc3b349c576feb7eb6c7859555c7b9e10b98deee408f19112d57f28916b61280a6303b385920cd33af82ea5107612d9b6fd62128708f115ffc4310b1752e69ee37b7de96404e269fb0cf12bc9a6c76c44bdf9d74be3e7b48bfca374899ddfccf55a8dc46e372809cfd1383d", 0x0, 0x2, 0x8001, 0xff, 0x5, 0x3, 0x5, 'syz0\x00'}) r8 = syz_io_uring_complete(0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r8, 0x800448d3, &(0x7f0000001f40)={@fixed={[], 0x10}, 0x7, 0x7f, 0x6, 0xffce, 0x81, "2dc16e697b315b31d6a9f8014651905d2c1c152138ace17cf58dd72d5fca665041d5f4cfa2b3e575e6f9909926531d4806a8d1a6961d1965f5bd3517437fd60667320b34bb4b02ff03ba741a9646920a7f8466b1b2036396081ef6dbac69f5e38f52bb5f19ed28f801cc5520d97ad284ab3eb6991833d55a61f5e551799b2814"}) 00:19:53 executing program 4: socketpair(0x0, 0x0, 0x9, &(0x7f0000008c00)) 00:19:54 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000007700)='/dev/bsg\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0) 00:19:54 executing program 1: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)) r5 = socket(0x27, 0x4, 0x8000) connect$tipc(r5, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) 00:19:54 executing program 5: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)={0xffffffffffffffff}) r6 = socket(0x27, 0x4, 0x8000) connect$tipc(r6, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) socketpair(0x4, 0x4, 0x101, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000001e80)={0xffffffffffffffff, r5, 0x6, 0xc4, &(0x7f0000001d80)="27b7d8c5455373ff0efe48df97f118d624362a0446f564a823726329fcd148cf9fdbc0255d8498159837dc14a70229ceb7c0b887e8a0a37be6bb13932468f54bf4b701322bccdbb2bad597bdea19825ae26dcde6fa106363bfc3b349c576feb7eb6c7859555c7b9e10b98deee408f19112d57f28916b61280a6303b385920cd33af82ea5107612d9b6fd62128708f115ffc4310b1752e69ee37b7de96404e269fb0cf12bc9a6c76c44bdf9d74be3e7b48bfca374899ddfccf55a8dc46e372809cfd1383d", 0x0, 0x2, 0x8001, 0xff, 0x5, 0x3, 0x5, 'syz0\x00'}) r8 = syz_io_uring_complete(0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r8, 0x800448d3, &(0x7f0000001f40)={@fixed={[], 0x10}, 0x7, 0x7f, 0x6, 0xffce, 0x81, "2dc16e697b315b31d6a9f8014651905d2c1c152138ace17cf58dd72d5fca665041d5f4cfa2b3e575e6f9909926531d4806a8d1a6961d1965f5bd3517437fd60667320b34bb4b02ff03ba741a9646920a7f8466b1b2036396081ef6dbac69f5e38f52bb5f19ed28f801cc5520d97ad284ab3eb6991833d55a61f5e551799b2814"}) 00:19:54 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000008c00)) 00:19:54 executing program 3: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)) socket(0x27, 0x4, 0x8000) 00:19:54 executing program 0: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)) r5 = socket(0x27, 0x4, 0x8000) connect$tipc(r5, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) socketpair(0x4, 0x4, 0x101, &(0x7f0000001d40)) 00:19:54 executing program 2: socketpair(0x0, 0x0, 0x9, &(0x7f0000008c00)) 00:19:54 executing program 1: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)) socket(0x27, 0x4, 0x8000) 00:19:54 executing program 4: socketpair(0x0, 0x0, 0x0, 0x0) 00:19:54 executing program 0: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)) r5 = socket(0x27, 0x4, 0x8000) connect$tipc(r5, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) 00:19:54 executing program 5: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)={0xffffffffffffffff}) r6 = socket(0x27, 0x4, 0x8000) connect$tipc(r6, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) socketpair(0x4, 0x4, 0x101, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000001e80)={0xffffffffffffffff, r5, 0x6, 0xc4, &(0x7f0000001d80)="27b7d8c5455373ff0efe48df97f118d624362a0446f564a823726329fcd148cf9fdbc0255d8498159837dc14a70229ceb7c0b887e8a0a37be6bb13932468f54bf4b701322bccdbb2bad597bdea19825ae26dcde6fa106363bfc3b349c576feb7eb6c7859555c7b9e10b98deee408f19112d57f28916b61280a6303b385920cd33af82ea5107612d9b6fd62128708f115ffc4310b1752e69ee37b7de96404e269fb0cf12bc9a6c76c44bdf9d74be3e7b48bfca374899ddfccf55a8dc46e372809cfd1383d", 0x0, 0x2, 0x8001, 0xff, 0x5, 0x3, 0x5, 'syz0\x00'}) syz_io_uring_complete(0x0) 00:19:54 executing program 3: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socket(0x27, 0x4, 0x8000) 00:19:54 executing program 2: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)) r5 = socket(0x27, 0x4, 0x8000) connect$tipc(r5, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) socketpair(0x4, 0x4, 0x101, &(0x7f0000001d40)) 00:19:54 executing program 1: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)) 00:19:54 executing program 0: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)) socket(0x27, 0x4, 0x8000) 00:19:54 executing program 4: socketpair(0x0, 0x0, 0x0, 0x0) 00:19:54 executing program 5: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)={0xffffffffffffffff}) r6 = socket(0x27, 0x4, 0x8000) connect$tipc(r6, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) socketpair(0x4, 0x4, 0x101, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000001e80)={0xffffffffffffffff, r5, 0x6, 0xc4, &(0x7f0000001d80)="27b7d8c5455373ff0efe48df97f118d624362a0446f564a823726329fcd148cf9fdbc0255d8498159837dc14a70229ceb7c0b887e8a0a37be6bb13932468f54bf4b701322bccdbb2bad597bdea19825ae26dcde6fa106363bfc3b349c576feb7eb6c7859555c7b9e10b98deee408f19112d57f28916b61280a6303b385920cd33af82ea5107612d9b6fd62128708f115ffc4310b1752e69ee37b7de96404e269fb0cf12bc9a6c76c44bdf9d74be3e7b48bfca374899ddfccf55a8dc46e372809cfd1383d", 0x0, 0x2, 0x8001, 0xff, 0x5, 0x3, 0x5, 'syz0\x00'}) 00:19:54 executing program 3: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) socket(0x27, 0x4, 0x8000) 00:19:54 executing program 1: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)) 00:19:54 executing program 0: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)) 00:19:54 executing program 2: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)={0xffffffffffffffff}) r6 = socket(0x27, 0x4, 0x8000) connect$tipc(r6, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) socketpair(0x4, 0x4, 0x101, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000001e80)={0xffffffffffffffff, r5, 0x6, 0xc4, &(0x7f0000001d80)="27b7d8c5455373ff0efe48df97f118d624362a0446f564a823726329fcd148cf9fdbc0255d8498159837dc14a70229ceb7c0b887e8a0a37be6bb13932468f54bf4b701322bccdbb2bad597bdea19825ae26dcde6fa106363bfc3b349c576feb7eb6c7859555c7b9e10b98deee408f19112d57f28916b61280a6303b385920cd33af82ea5107612d9b6fd62128708f115ffc4310b1752e69ee37b7de96404e269fb0cf12bc9a6c76c44bdf9d74be3e7b48bfca374899ddfccf55a8dc46e372809cfd1383d", 0x0, 0x2, 0x8001, 0xff, 0x5, 0x3, 0x5, 'syz0\x00'}) syz_io_uring_complete(0x0) 00:19:54 executing program 4: socketpair(0x0, 0x0, 0x0, 0x0) 00:19:54 executing program 5: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)) r5 = socket(0x27, 0x4, 0x8000) connect$tipc(r5, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) socketpair(0x4, 0x4, 0x101, &(0x7f0000001d40)) 00:19:54 executing program 1: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)) 00:19:54 executing program 3: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) socket(0x27, 0x4, 0x8000) 00:19:54 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000002b40)={0x8000, 0xff, 0x40, 0x3, 0x8, 0x1c}) tkill(0x0, 0x4) 00:19:54 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000002b40)={0x8000, 0xff, 0x40, 0x3, 0x8, 0x1c}) tkill(0x0, 0x4) 00:19:54 executing program 0: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) 00:19:54 executing program 5: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)) r5 = socket(0x27, 0x4, 0x8000) connect$tipc(r5, &(0x7f0000001d00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10) 00:19:55 executing program 1: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)) 00:19:55 executing program 3: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) socket(0x27, 0x4, 0x8000) 00:19:55 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000002b40)={0x8000, 0xff, 0x40, 0x3, 0x8, 0x1c}) tkill(0x0, 0x4) 00:19:55 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000002b40)={0x8000, 0xff, 0x40, 0x3, 0x8, 0x1c}) tkill(0x0, 0x4) 00:19:55 executing program 0: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) 00:19:55 executing program 5: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)) socket(0x27, 0x4, 0x8000) 00:19:55 executing program 3: socket(0x3, 0x80000, 0x1000) r0 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00'}) socket(0x27, 0x4, 0x8000) 00:19:55 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000002b40)={0x8000, 0xff, 0x40, 0x3, 0x8, 0x1c}) tkill(0x0, 0x4) 00:19:55 executing program 1: socket(0x3, 0x80000, 0x1000) r0 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00'}) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)) 00:19:55 executing program 0: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) 00:19:55 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000002b40)={0x8000, 0xff, 0x40, 0x3, 0x8, 0x1c}) tkill(0x0, 0x4) 00:19:55 executing program 3: socket(0x3, 0x80000, 0x1000) r0 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) socket(0x27, 0x4, 0x8000) 00:19:55 executing program 5: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)) 00:19:55 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000002b40)={0x8000, 0xff, 0x40, 0x3, 0x8, 0x1c}) 00:19:55 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000002b40)={0x8000, 0xff, 0x40, 0x3, 0x8, 0x1c}) 00:19:55 executing program 1: socket(0x3, 0x80000, 0x1000) r0 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)) 00:19:55 executing program 0: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) 00:19:55 executing program 3: socket(0x3, 0x80000, 0x1000) r0 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) socket(0x27, 0x4, 0x8000) 00:19:55 executing program 5: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) 00:19:55 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) 00:19:55 executing program 1: socket(0x3, 0x80000, 0x1000) r0 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)) 00:19:55 executing program 0: socket(0x3, 0x80000, 0x1000) r0 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00'}) 00:19:55 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) 00:19:55 executing program 3: socket(0x3, 0x80000, 0x1000) r0 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) socket(0x27, 0x4, 0x8000) 00:19:55 executing program 5: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) 00:19:55 executing program 0: socket(0x3, 0x80000, 0x1000) r0 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) 00:19:55 executing program 1: socket(0x3, 0x80000, 0x1000) r0 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)) 00:19:55 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r7 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r7, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:55 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r7 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r7, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:55 executing program 3: socket(0x3, 0x80000, 0x1000) r0 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x27, 0x4, 0x8000) 00:19:55 executing program 5: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) 00:19:56 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r7 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r7, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:56 executing program 3: socket(0x3, 0x80000, 0x1000) r0 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x27, 0x4, 0x8000) 00:19:56 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r6 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r6, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) 00:19:56 executing program 1: socket(0x3, 0x80000, 0x1000) r0 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)) 00:19:56 executing program 0: socket(0x3, 0x80000, 0x1000) r0 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) 00:19:56 executing program 5: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) 00:19:56 executing program 3: socket(0x3, 0x80000, 0x1000) r0 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket(0x27, 0x4, 0x8000) 00:19:56 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r7 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r7, 0x80184560, &(0x7f0000002980)=""/164) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:56 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) 00:19:56 executing program 0: socket(0x3, 0x80000, 0x1000) r0 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) 00:19:56 executing program 1: socket(0x3, 0x80000, 0x1000) r0 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)) 00:19:56 executing program 5: socket(0x3, 0x80000, 0x1000) r0 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00'}) 00:19:56 executing program 3: socket(0x3, 0x80000, 0x1000) socket(0x21, 0x6, 0x0) socket(0x27, 0x4, 0x8000) 00:19:56 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:56 executing program 0: socket(0x3, 0x80000, 0x1000) r0 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) 00:19:56 executing program 1: socket(0x3, 0x80000, 0x1000) r0 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)) 00:19:56 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) 00:19:56 executing program 5: socket(0x3, 0x80000, 0x1000) r0 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) 00:19:56 executing program 3: socket(0x3, 0x80000, 0x1000) socket(0x27, 0x4, 0x8000) 00:19:56 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:56 executing program 1: socket(0x3, 0x80000, 0x1000) socket(0x21, 0x6, 0x0) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)) 00:19:56 executing program 5: socket(0x3, 0x80000, 0x1000) r0 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) 00:19:56 executing program 0: socket(0x3, 0x80000, 0x1000) r0 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) 00:19:56 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() socket$inet_sctp(0x2, 0x1, 0x84) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) 00:19:56 executing program 3: socket(0x27, 0x4, 0x8000) 00:19:56 executing program 5: socket(0x3, 0x80000, 0x1000) r0 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) 00:19:56 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() socket$inet_sctp(0x2, 0x1, 0x84) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:56 executing program 3: socket(0x0, 0x4, 0x8000) 00:19:56 executing program 0: socket(0x3, 0x80000, 0x1000) socket(0x21, 0x6, 0x0) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) 00:19:56 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) 00:19:56 executing program 5: socket(0x3, 0x80000, 0x1000) r0 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) 00:19:56 executing program 1: socket(0x3, 0x80000, 0x1000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)) 00:19:56 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:56 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) 00:19:57 executing program 3: socket(0x0, 0x4, 0x8000) 00:19:57 executing program 0: socket(0x3, 0x80000, 0x1000) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) 00:19:57 executing program 5: socket(0x3, 0x80000, 0x1000) r0 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) 00:19:57 executing program 1: socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)) 00:19:57 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:57 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) 00:19:57 executing program 0: syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) 00:19:57 executing program 5: socket(0x3, 0x80000, 0x1000) socket(0x21, 0x6, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) 00:19:57 executing program 3: socket(0x0, 0x4, 0x8000) 00:19:57 executing program 1: socketpair(0x0, 0x3, 0x1, &(0x7f0000001cc0)) 00:19:57 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:57 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) 00:19:57 executing program 5: socket(0x3, 0x80000, 0x1000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) 00:19:57 executing program 0: syz_open_dev$I2C(0x0, 0x4, 0x404400) 00:19:57 executing program 3: socket(0x27, 0x0, 0x8000) 00:19:57 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:57 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) 00:19:57 executing program 1: socketpair(0x0, 0x3, 0x1, &(0x7f0000001cc0)) 00:19:57 executing program 0: syz_open_dev$I2C(0x0, 0x4, 0x404400) 00:19:57 executing program 3: socket(0x27, 0x0, 0x0) 00:19:57 executing program 5: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) 00:19:57 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:57 executing program 1: socketpair(0x0, 0x3, 0x1, &(0x7f0000001cc0)) 00:19:57 executing program 0: syz_open_dev$I2C(0x0, 0x4, 0x404400) 00:19:57 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) 00:19:57 executing program 3: socketpair(0x0, 0x3, 0x1, &(0x7f0000001cc0)) 00:19:57 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40002000) 00:19:57 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:57 executing program 0: syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x0, 0x404400) 00:19:57 executing program 1: socketpair(0x2a, 0x0, 0x1, &(0x7f0000001cc0)) 00:19:57 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) 00:19:57 executing program 5: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 00:19:57 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:58 executing program 0: syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x0, 0x0) 00:19:58 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() socket$inet_sctp(0x2, 0x1, 0x84) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) 00:19:58 executing program 1: socketpair(0x2a, 0x0, 0x0, &(0x7f0000001cc0)) 00:19:58 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) 00:19:58 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:58 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:58 executing program 0: syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x0, 0x0) 00:19:58 executing program 1: socketpair(0x2a, 0x0, 0x0, 0x0) 00:19:58 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() socket$inet_sctp(0x2, 0x1, 0x84) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) 00:19:58 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) 00:19:58 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:58 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:58 executing program 1: socketpair(0x2a, 0x0, 0x0, 0x0) 00:19:58 executing program 0: syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x0, 0x0) 00:19:58 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() socket$inet_sctp(0x2, 0x1, 0x84) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) 00:19:58 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) 00:19:58 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:58 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:58 executing program 1: socketpair(0x2a, 0x0, 0x0, 0x0) 00:19:58 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() socket$inet_sctp(0x2, 0x1, 0x84) 00:19:58 executing program 0: syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x0, 0x0) 00:19:58 executing program 4: getpid() write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) 00:19:58 executing program 1: socketpair(0x2a, 0x0, 0x0, &(0x7f0000001cc0)) 00:19:58 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) 00:19:58 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:58 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() 00:19:58 executing program 4: write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) 00:19:58 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:58 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() socket$inet_sctp(0x2, 0x1, 0x84) 00:19:58 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:58 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r7 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r7, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:58 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) 00:19:59 executing program 4: write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) 00:19:59 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r7 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r7, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:59 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() 00:19:59 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) 00:19:59 executing program 2: getpid() r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:59 executing program 1: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) 00:19:59 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r7 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r7, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:59 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) 00:19:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:59 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) 00:19:59 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) 00:19:59 executing program 1: r0 = socket(0x3, 0x80000, 0x1000) r1 = socket(0x21, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x2, &(0x7f0000001180)=""/94, 0x5e}, 0x40002000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40881) syz_open_dev$I2C(&(0x7f0000001340)='/dev/i2c-#\x00', 0x4, 0x404400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x2c000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000844) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe588}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c000060}, 0x20000000) socketpair(0x2a, 0x3, 0x1, &(0x7f0000001cc0)) socket(0x27, 0x4, 0x8000) 00:19:59 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:59 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r7 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r7, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:59 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000002b40)={0x8000, 0xff, 0x40, 0x3, 0x8, 0x1c}) tkill(0x0, 0x4) 00:19:59 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) 00:19:59 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) 00:19:59 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000002b40)={0x8000, 0xff, 0x40, 0x3, 0x8, 0x1c}) tkill(0x0, 0x4) 00:19:59 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:59 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r7 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r7, 0x80184560, &(0x7f0000002980)=""/164) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:59 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) 00:19:59 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000002b40)={0x8000, 0xff, 0x40, 0x3, 0x8, 0x1c}) tkill(0x0, 0x4) 00:19:59 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) 00:19:59 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:59 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000002b40)={0x8000, 0xff, 0x40, 0x3, 0x8, 0x1c}) tkill(0x0, 0x4) 00:19:59 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) 00:19:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:19:59 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:59 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) 00:19:59 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000002b40)={0x8000, 0xff, 0x40, 0x3, 0x8, 0x1c}) tkill(0x0, 0x4) 00:19:59 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r7 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r7, 0x80184560, &(0x7f0000002980)=""/164) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:19:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:19:59 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)) syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) 00:20:00 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) 00:20:00 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000002b40)={0x8000, 0xff, 0x40, 0x3, 0x8, 0x1c}) tkill(0x0, 0x4) 00:20:00 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:00 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:00 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) 00:20:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:00 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x400, "88ebab", 0x1, 0x7f}) 00:20:00 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) 00:20:00 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:00 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000002b40)={0x8000, 0xff, 0x40, 0x3, 0x8, 0x1c}) 00:20:00 executing program 3: getpid() syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) 00:20:00 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)) syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) 00:20:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:00 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) 00:20:00 executing program 3: syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) 00:20:00 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:00 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) 00:20:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x400, "88ebab", 0x1, 0x7f}) 00:20:01 executing program 1: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) 00:20:01 executing program 3: syz_open_dev$evdev(0x0, 0x100, 0x2101) 00:20:01 executing program 5: getpid() syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) 00:20:01 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r7 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r7, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:01 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:01 executing program 3: syz_open_dev$evdev(0x0, 0x100, 0x2101) 00:20:01 executing program 1: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) 00:20:01 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r6 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r6, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) 00:20:01 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() socket$inet_sctp(0x2, 0x1, 0x84) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:01 executing program 5: syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) 00:20:01 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r6 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r6, 0x80184560, &(0x7f0000002980)=""/164) 00:20:01 executing program 1: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) 00:20:02 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x400, "88ebab", 0x1, 0x7f}) 00:20:02 executing program 5: syz_open_dev$evdev(0x0, 0x100, 0x2101) 00:20:02 executing program 3: syz_open_dev$evdev(0x0, 0x100, 0x2101) 00:20:02 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() socket$inet_sctp(0x2, 0x1, 0x84) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:02 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) 00:20:02 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) 00:20:02 executing program 5: syz_open_dev$evdev(0x0, 0x100, 0x2101) 00:20:02 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) 00:20:02 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:02 executing program 3: syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x0, 0x2101) 00:20:02 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) 00:20:02 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() socket$inet_sctp(0x2, 0x1, 0x84) [ 308.559131][ T9430] Bluetooth: hci0: command 0x0401 tx timeout 00:20:03 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x0, "88ebab", 0x1, 0x7f}) 00:20:03 executing program 5: syz_open_dev$evdev(0x0, 0x100, 0x2101) 00:20:03 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:03 executing program 3: syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x0, 0x2101) 00:20:03 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) 00:20:03 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() 00:20:03 executing program 5: syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x0, 0x2101) 00:20:03 executing program 1: syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x0, 0x2101) 00:20:03 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) 00:20:03 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:03 executing program 3: syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x0, 0x2101) 00:20:03 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x0, "88ebab", 0x0, 0x7f}) 00:20:03 executing program 5: syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x0, 0x2101) 00:20:03 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) 00:20:03 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:03 executing program 1: syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x0, 0x2101) 00:20:03 executing program 3: syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x0) 00:20:03 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x0, "88ebab"}) 00:20:03 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) 00:20:03 executing program 5: syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x0, 0x2101) 00:20:03 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:03 executing program 1: syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x0, 0x2101) 00:20:03 executing program 3: syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x0) 00:20:03 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x0, "88ebab", 0x0, 0x7f}) 00:20:03 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) 00:20:03 executing program 5: syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x0) 00:20:03 executing program 1: syz_open_dev$evdev(0x0, 0x0, 0x2101) 00:20:03 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:03 executing program 3: syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x0) 00:20:03 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:03 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) 00:20:03 executing program 5: syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x0) 00:20:03 executing program 1: syz_open_dev$evdev(0x0, 0x0, 0x2101) 00:20:04 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:04 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:04 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:04 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) 00:20:04 executing program 5: syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x0) 00:20:04 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:04 executing program 1: syz_open_dev$evdev(0x0, 0x0, 0x2101) 00:20:04 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) 00:20:04 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) 00:20:04 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)) syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) 00:20:04 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:04 executing program 1: syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x0, 0x0) 00:20:04 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x400, "88ebab", 0x1, 0x7f}) 00:20:04 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x400, "88ebab", 0x1, 0x7f}) 00:20:04 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x400, "88ebab", 0x1, 0x7f}) 00:20:04 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) [ 310.639026][ T4812] Bluetooth: hci0: command 0x0401 tx timeout 00:20:04 executing program 1: syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x0, 0x0) 00:20:04 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:04 executing program 1: syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x0, 0x0) 00:20:04 executing program 4: getpid() syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) 00:20:04 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:04 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:04 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:04 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:05 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x400, "88ebab", 0x1, 0x7f}) 00:20:05 executing program 4: syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) 00:20:05 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x400, "88ebab", 0x1, 0x7f}) 00:20:05 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000002b40)={0x8000, 0xff, 0x40, 0x3, 0x8, 0x1c}) 00:20:05 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:05 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) sched_setattr(0x0, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:05 executing program 4: syz_open_dev$evdev(0x0, 0x100, 0x2101) 00:20:05 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:05 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000002b40)={0x8000, 0xff, 0x40, 0x3, 0x8, 0x1c}) 00:20:05 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) sched_setattr(0x0, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:05 executing program 4: syz_open_dev$evdev(0x0, 0x100, 0x2101) 00:20:05 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) sched_setattr(0x0, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:06 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x400, "88ebab", 0x1, 0x7f}) 00:20:06 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000002b40)={0x8000, 0xff, 0x40, 0x3, 0x8, 0x1c}) 00:20:06 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x400, "88ebab", 0x1, 0x7f}) 00:20:06 executing program 4: syz_open_dev$evdev(0x0, 0x100, 0x2101) 00:20:06 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 00:20:06 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r1, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:06 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) 00:20:06 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 00:20:06 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r1, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:06 executing program 4: syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x0, 0x2101) 00:20:06 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r7 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r7, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:06 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 312.726485][ T4812] Bluetooth: hci0: command 0x0401 tx timeout 00:20:07 executing program 5: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x400, "88ebab", 0x1, 0x7f}) 00:20:07 executing program 4: syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x0, 0x2101) 00:20:07 executing program 3: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x400, "88ebab", 0x1, 0x7f}) 00:20:07 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r1, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:07 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r7 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r7, 0x80184560, &(0x7f0000002980)=""/164) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:07 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 00:20:07 executing program 4: syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x0, 0x2101) 00:20:07 executing program 5: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x400, "88ebab", 0x1, 0x7f}) 00:20:07 executing program 4: syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x0) 00:20:07 executing program 1: getpid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 00:20:07 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r1, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:07 executing program 5: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x400, "88ebab", 0x1, 0x7f}) 00:20:07 executing program 3: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x400, "88ebab", 0x1, 0x7f}) 00:20:07 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r7 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r7, 0x80184560, &(0x7f0000002980)=""/164) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:07 executing program 4: syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x0) 00:20:07 executing program 0: getpid() read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r0, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:07 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x400, "88ebab", 0x1, 0x7f}) 00:20:07 executing program 1: getpid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 00:20:07 executing program 3: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x400, "88ebab", 0x1, 0x7f}) 00:20:07 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r7 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r7, 0x80184560, &(0x7f0000002980)=""/164) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:07 executing program 4: syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x0) 00:20:07 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x400, "88ebab", 0x1, 0x7f}) 00:20:07 executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r0, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:07 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x400, "88ebab", 0x1, 0x7f}) 00:20:07 executing program 1: getpid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 00:20:07 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:08 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r7 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r7, 0x80184560, &(0x7f0000002980)=""/164) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:08 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x400, "88ebab", 0x1, 0x7f}) 00:20:08 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x400, "88ebab", 0x1, 0x7f}) 00:20:08 executing program 0: read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:08 executing program 1: sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 00:20:08 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:08 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x400, "88ebab", 0x1, 0x7f}) 00:20:08 executing program 0: read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:08 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:08 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x400, "88ebab", 0x1, 0x7f}) 00:20:08 executing program 1: sched_setattr(0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 00:20:08 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:08 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:08 executing program 0: read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:08 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:08 executing program 1: sched_setattr(0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 00:20:08 executing program 4: sched_setattr(0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 00:20:08 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:08 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:08 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:08 executing program 4: read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:08 executing program 0: read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:08 executing program 1: sched_setattr(0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 314.798743][ T9430] Bluetooth: hci0: command 0x0401 tx timeout 00:20:08 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:08 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x1, 0x7f}) 00:20:08 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:08 executing program 0: read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:08 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:08 executing program 1: read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:08 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:08 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:08 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x1, 0x7f}) 00:20:08 executing program 0: read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:09 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() socket$inet_sctp(0x2, 0x1, 0x84) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:09 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:09 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:09 executing program 0: read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:09 executing program 1: read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:09 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:09 executing program 4: read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:09 executing program 1: read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:09 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x400, "88ebab", 0x1, 0x7f}) 00:20:09 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:09 executing program 0: read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:09 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:09 executing program 4: read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:09 executing program 1: read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:09 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:10 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:10 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:10 executing program 1: read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) 00:20:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:10 executing program 0: read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x400, "88ebab", 0x1, 0x7f}) 00:20:10 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:10 executing program 1: read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) 00:20:10 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:10 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:10 executing program 1: read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) 00:20:10 executing program 1: read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:10 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:10 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:10 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) [ 316.868644][ T9430] Bluetooth: hci0: command 0x0401 tx timeout [ 316.951237][ T3222] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.957541][ T3222] ieee802154 phy1 wpan1: encryption failed: -22 00:20:11 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) 00:20:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x1}) 00:20:11 executing program 0: read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x400, "88ebab", 0x1, 0x7f}) 00:20:11 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:11 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x1}) 00:20:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:11 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:11 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) 00:20:11 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:11 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:11 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) 00:20:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:11 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:12 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:12 executing program 0: read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x400, "88ebab", 0x1, 0x7f}) 00:20:12 executing program 5: read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:12 executing program 4: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:12 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x1, 0x7f}) 00:20:12 executing program 4: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:12 executing program 2: getpid() r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:12 executing program 4: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) [ 318.948466][ T9430] Bluetooth: hci0: command 0x0401 tx timeout 00:20:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:12 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:12 executing program 0: read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x0, "88ebab", 0x1, 0x7f}) 00:20:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:13 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x1, 0x7f}) 00:20:13 executing program 0: read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x0, "88ebab", 0x1, 0x7f}) 00:20:13 executing program 1: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:13 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:13 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:13 executing program 0: read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x0, "88ebab", 0x1, 0x7f}) 00:20:13 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:13 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:13 executing program 1: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:13 executing program 1: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:14 executing program 0: read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x0, 0x7f}) 00:20:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:14 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:14 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x1, 0x7f}) 00:20:14 executing program 3: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:14 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:14 executing program 0: read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x0, 0x7f}) 00:20:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:14 executing program 3: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:14 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab"}) 00:20:14 executing program 2: read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x0, 0x7f}) [ 321.028443][ T9430] Bluetooth: hci0: command 0x0401 tx timeout 00:20:14 executing program 5: getpid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 00:20:14 executing program 0: read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x0, 0x7f}) 00:20:14 executing program 3: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:14 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab"}) 00:20:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:15 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r1, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:15 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:15 executing program 0: read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab"}) 00:20:15 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 00:20:15 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000002b40)={0x8000, 0xff, 0x40, 0x3, 0x8, 0x1c}) tkill(0x0, 0x4) 00:20:15 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000002b40)={0x8000, 0xff, 0x40, 0x3, 0x8, 0x1c}) tkill(0x0, 0x4) 00:20:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:15 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000002b40)={0x8000, 0xff, 0x40, 0x3, 0x8, 0x1c}) tkill(0x0, 0x4) 00:20:15 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:15 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:15 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000002b40)={0x8000, 0xff, 0x40, 0x3, 0x8, 0x1c}) tkill(0x0, 0x4) 00:20:15 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000002b40)={0x8000, 0xff, 0x40, 0x3, 0x8, 0x1c}) tkill(0x0, 0x4) 00:20:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab"}) 00:20:15 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab", 0x0, 0x7f}) 00:20:15 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000002b40)={0x8000, 0xff, 0x40, 0x3, 0x8, 0x1c}) tkill(0x0, 0x4) 00:20:15 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000002b40)={0x8000, 0xff, 0x40, 0x3, 0x8, 0x1c}) tkill(0x0, 0x4) 00:20:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x10004000) 00:20:15 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000002b40)={0x8000, 0xff, 0x40, 0x3, 0x8, 0x1c}) tkill(0x0, 0x4) 00:20:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab"}) 00:20:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:15 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000002b40)={0x8000, 0xff, 0x40, 0x3, 0x8, 0x1c}) tkill(0x0, 0x4) 00:20:15 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000002b40)={0x8000, 0xff, 0x40, 0x3, 0x8, 0x1c}) 00:20:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x10004000) 00:20:15 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000002b40)={0x8000, 0xff, 0x40, 0x3, 0x8, 0x1c}) 00:20:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab"}) 00:20:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:15 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) 00:20:15 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000002b40)={0x8000, 0xff, 0x40, 0x3, 0x8, 0x1c}) 00:20:15 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) 00:20:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x10004000) 00:20:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab"}) 00:20:16 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r7 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r7, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:20:16 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r7 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r7, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x10004000) 00:20:16 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5, 0x0, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r6 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000002200)=""/169) getpid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r8 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002ac0)={0x2, 0x1, 0x4, 0x1, 0x8, {}, {0x3, 0x1, 0x4, 0x6, 0x5, 0xa3, "34e1092d"}, 0x3, 0x4, @fd, 0x3, 0x0, r3}) 00:20:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:16 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r6 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r6, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) 00:20:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab"}) 00:20:16 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r6 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r6, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) 00:20:16 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r7 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r7, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab"}) 00:20:16 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r6 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r6, 0x80184560, &(0x7f0000002980)=""/164) 00:20:16 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r6 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r6, 0x80184560, &(0x7f0000002980)=""/164) 00:20:16 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r6 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r6, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) 00:20:16 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r5 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000002200)=""/169) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r7 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r7, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000002a80)={0xffffffffffffffff, 0x400, "88ebab", 0x1, 0x7f}) 00:20:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:16 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) 00:20:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000002a80)={0x0, 0x0, "88ebab"}) 00:20:16 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) 00:20:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:16 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r6 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r6, 0x80184560, &(0x7f0000002980)=""/164) 00:20:16 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) 00:20:16 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r6 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r6, 0x80184560, &(0x7f0000002980)=""/164) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000002a40)='westwood\x00', 0x9) 00:20:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:16 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) [ 323.108369][ T20] Bluetooth: hci0: command 0x0401 tx timeout 00:20:16 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) r6 = syz_open_dev$evdev(&(0x7f0000002940)='/dev/input/event#\x00', 0x3ee587e0, 0x44080) ioctl$EVIOCGABS20(r6, 0x80184560, &(0x7f0000002980)=""/164) 00:20:17 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) 00:20:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:17 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() socket$inet_sctp(0x2, 0x1, 0x84) 00:20:17 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() socket$inet_sctp(0x2, 0x1, 0x84) 00:20:17 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002900)={'batadv0\x00'}) 00:20:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x10004000) 00:20:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:17 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() socket$inet_sctp(0x2, 0x1, 0x84) 00:20:17 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() 00:20:17 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() 00:20:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x10004000) 00:20:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:17 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() 00:20:17 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) 00:20:17 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) 00:20:17 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) getpid() 00:20:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x10004000) 00:20:17 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) 00:20:17 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) 00:20:17 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) 00:20:17 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) r4 = syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002200)=""/169) 00:20:17 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) syz_open_dev$evdev(&(0x7f00000021c0)='/dev/input/event#\x00', 0x100, 0x2101) 00:20:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x10004000) 00:20:17 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) 00:20:18 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) 00:20:18 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002180)=""/6) 00:20:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x10004000) 00:20:18 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 00:20:18 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 00:20:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x10004000) 00:20:18 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 00:20:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x10004000) 00:20:18 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) 00:20:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x10004000) 00:20:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:18 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) 00:20:18 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) 00:20:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x10004000) 00:20:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x10004000) 00:20:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:18 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) sched_setattr(0x0, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) 00:20:18 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) 00:20:18 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) 00:20:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x10004000) 00:20:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:18 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) 00:20:18 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)) sched_setattr(0x0, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) 00:20:18 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x0, 0x5, {r1, r2/1000+60000}, {0x3, 0xc, 0x9c, 0x2, 0x7, 0xfa, "adc658f1"}, 0x428, 0x4, @userptr, 0x5}) 00:20:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:19 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) 00:20:19 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) [ 325.188224][ T9430] Bluetooth: hci0: command 0x0401 tx timeout 00:20:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:19 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000040)) 00:20:19 executing program 0: getpid() read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) 00:20:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) 00:20:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_io_uring_complete(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:19 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) 00:20:19 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x2, 0x7fff, 0xe5, 0xc00000000000000, 0x40, 0xe40, 0x68a, 0x5}, 0x0) 00:20:19 executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) 00:20:19 executing program 4: getpid() sched_setattr(0x0, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) 00:20:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 00:20:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:19 executing program 2: getpid() 00:20:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:19 executing program 0: read$FUSE(0xffffffffffffffff, 0x0, 0x0) 00:20:19 executing program 4: sched_setattr(0x0, &(0x7f0000002140)={0x38, 0x5, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) 00:20:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_io_uring_complete(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:19 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_io_uring_complete(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:19 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:19 executing program 4: sched_setattr(0x0, 0x0, 0x0) 00:20:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:20 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_io_uring_complete(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:20 executing program 4: sched_setattr(0x0, 0x0, 0x0) 00:20:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:20 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_io_uring_complete(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:20 executing program 4: sched_setattr(0x0, 0x0, 0x0) 00:20:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:20 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00'}) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_io_uring_complete(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:20 executing program 4: sched_setattr(0x0, &(0x7f0000002140)={0x38, 0x0, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) 00:20:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_io_uring_complete(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:20 executing program 4: sched_setattr(0x0, &(0x7f0000002140)={0x38, 0x0, 0x0, 0x6, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) 00:20:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:20 executing program 4: sched_setattr(0x0, &(0x7f0000002140)={0x38, 0x0, 0x0, 0x0, 0x7fffffff, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) 00:20:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00'}) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:21 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:21 executing program 4: sched_setattr(0x0, &(0x7f0000002140)={0x38, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) 00:20:21 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) [ 327.278041][ T4812] Bluetooth: hci0: command 0x0401 tx timeout 00:20:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00'}) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:21 executing program 4: sched_setattr(0x0, &(0x7f0000002140)={0x38, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) 00:20:21 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:21 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:21 executing program 4: sched_setattr(0x0, &(0x7f0000002140)={0x38, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0xdb8, 0x7, 0x101}, 0x0) 00:20:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00'}) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:21 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:21 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:21 executing program 4: sched_setattr(0x0, &(0x7f0000002140)={0x38, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x4, 0xdb8, 0x7, 0x101}, 0x0) 00:20:21 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:21 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:21 executing program 4: sched_setattr(0x0, &(0x7f0000002140)={0x38, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0xdb8, 0x7, 0x101}, 0x0) 00:20:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:21 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_io_uring_complete(0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:22 executing program 4: sched_setattr(0x0, &(0x7f0000002140)={0x38, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x7, 0x101}, 0x0) 00:20:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:22 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:22 executing program 4: sched_setattr(0x0, &(0x7f0000002140)={0x38, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0) 00:20:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:22 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:22 executing program 4: sched_setattr(0x0, &(0x7f0000002140)={0x38, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0) 00:20:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:22 executing program 1: openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:22 executing program 1: openat$smackfs_relabel_self(0xffffffffffffff9c, 0x0, 0x2, 0x0) 00:20:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_io_uring_complete(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:22 executing program 1: openat$smackfs_relabel_self(0xffffffffffffff9c, 0x0, 0x2, 0x0) 00:20:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_io_uring_complete(0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:23 executing program 1: openat$smackfs_relabel_self(0xffffffffffffff9c, 0x0, 0x2, 0x0) 00:20:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00'}) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) [ 329.367749][ T4812] Bluetooth: hci0: command 0x0401 tx timeout 00:20:23 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:23 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:23 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:23 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:23 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:23 executing program 5: openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:23 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:23 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:23 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:23 executing program 5: openat$smackfs_relabel_self(0xffffffffffffff9c, 0x0, 0x2, 0x0) 00:20:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:24 executing program 3: openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:24 executing program 5: openat$smackfs_relabel_self(0xffffffffffffff9c, 0x0, 0x2, 0x0) 00:20:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00'}) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:24 executing program 5: openat$smackfs_relabel_self(0xffffffffffffff9c, 0x0, 0x2, 0x0) 00:20:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00'}) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00'}) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_io_uring_complete(0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:25 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:25 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:25 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:25 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) [ 331.437953][ T9430] Bluetooth: hci0: command 0x0401 tx timeout 00:20:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00'}) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:25 executing program 0: openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:25 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:25 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:25 executing program 0: openat$smackfs_relabel_self(0xffffffffffffff9c, 0x0, 0x2, 0x0) 00:20:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) 00:20:25 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:25 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_io_uring_complete(0x0) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:25 executing program 0: openat$smackfs_relabel_self(0xffffffffffffff9c, 0x0, 0x2, 0x0) 00:20:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) 00:20:25 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) 00:20:26 executing program 0: openat$smackfs_relabel_self(0xffffffffffffff9c, 0x0, 0x2, 0x0) 00:20:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_io_uring_complete(0x0) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) 00:20:26 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_io_uring_complete(0x0) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:26 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) 00:20:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:26 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:26 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:26 executing program 2: ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:26 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(0x0) 00:20:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:27 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_io_uring_complete(0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:27 executing program 2: ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:27 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(0x0) 00:20:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_io_uring_complete(0x0) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:27 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:27 executing program 2: ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:27 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(0x0) 00:20:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 333.507674][ T9430] Bluetooth: hci0: command 0x0401 tx timeout 00:20:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:27 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:27 executing program 2: ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:27 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:27 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) 00:20:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:27 executing program 4: openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:27 executing program 2: ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:27 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:27 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) 00:20:27 executing program 4: openat$smackfs_relabel_self(0xffffffffffffff9c, 0x0, 0x2, 0x0) 00:20:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) 00:20:27 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:27 executing program 2: ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) syz_io_uring_setup(0x1707, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:28 executing program 4: openat$smackfs_relabel_self(0xffffffffffffff9c, 0x0, 0x2, 0x0) 00:20:28 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) 00:20:28 executing program 2: ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) syz_io_uring_setup(0x1707, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:28 executing program 5: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:28 executing program 2: ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) syz_io_uring_setup(0x1707, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:28 executing program 4: openat$smackfs_relabel_self(0xffffffffffffff9c, 0x0, 0x2, 0x0) 00:20:28 executing program 0: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:28 executing program 5: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) 00:20:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) 00:20:28 executing program 2: ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:28 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:28 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:28 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) 00:20:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) 00:20:28 executing program 2: ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:28 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:28 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:28 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) 00:20:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) 00:20:28 executing program 2: ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) 00:20:28 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:28 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) 00:20:28 executing program 2: ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) syz_io_uring_setup(0x1707, &(0x7f0000000280), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:29 executing program 0: syz_io_uring_setup(0x1707, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:29 executing program 5: syz_io_uring_setup(0x1707, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:29 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) 00:20:29 executing program 2: ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) syz_io_uring_setup(0x1707, &(0x7f0000000280), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, &(0x7f0000000340)) 00:20:29 executing program 0: syz_io_uring_setup(0x1707, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) 00:20:29 executing program 5: syz_io_uring_setup(0x1707, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) 00:20:29 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) 00:20:29 executing program 0: syz_io_uring_setup(0x1707, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:29 executing program 2: ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) syz_io_uring_setup(0x1707, &(0x7f0000000280), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, &(0x7f0000000340)) 00:20:29 executing program 5: syz_io_uring_setup(0x1707, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 335.597685][ T4812] Bluetooth: hci0: command 0x0401 tx timeout 00:20:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x10004000) 00:20:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x10004000) 00:20:29 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r1 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r2) 00:20:29 executing program 5: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:29 executing program 0: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:29 executing program 2: ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) syz_io_uring_setup(0x1707, &(0x7f0000000280), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, &(0x7f0000000340)) 00:20:29 executing program 4: syz_io_uring_setup(0x1707, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x10004000) 00:20:29 executing program 5: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:29 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r1 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r2) 00:20:29 executing program 0: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:29 executing program 2: ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) syz_io_uring_setup(0x1707, &(0x7f0000000280), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), 0x0) 00:20:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x10004000) 00:20:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x10004000) 00:20:30 executing program 5: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r1 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r2) 00:20:30 executing program 2: ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) syz_io_uring_setup(0x1707, &(0x7f0000000280), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), 0x0) 00:20:30 executing program 0: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080)='802.15.4 MAC\x00', r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, r8, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x10004000) 00:20:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080)='802.15.4 MAC\x00', r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, r8, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x10004000) 00:20:30 executing program 5: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:30 executing program 0: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:30 executing program 2: ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) syz_io_uring_setup(0x1707, &(0x7f0000000280), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), 0x0) 00:20:30 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r1 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r2) 00:20:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080)='802.15.4 MAC\x00', r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, r8, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x10004000) 00:20:30 executing program 5: syz_io_uring_setup(0x1707, &(0x7f0000000280), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080)='802.15.4 MAC\x00', r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, r8, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x10004000) 00:20:30 executing program 0: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:30 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r1 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r2) 00:20:30 executing program 2: ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) syz_io_uring_setup(0x1707, &(0x7f0000000280), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), 0x0) 00:20:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080)='802.15.4 MAC\x00', r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, r8, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x10004000) 00:20:30 executing program 5: syz_io_uring_setup(0x1707, &(0x7f0000000280), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:30 executing program 0: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, &(0x7f0000000340)) 00:20:30 executing program 2: syz_io_uring_setup(0x1707, &(0x7f0000000280), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:30 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r1 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r2) 00:20:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080)='802.15.4 MAC\x00', r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, r8, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x10004000) 00:20:30 executing program 5: syz_io_uring_setup(0x1707, &(0x7f0000000280), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:30 executing program 0: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, &(0x7f0000000340)) 00:20:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080)='802.15.4 MAC\x00', r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, r8, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x10004000) 00:20:30 executing program 1: r0 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r1 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r2) 00:20:31 executing program 2: syz_io_uring_setup(0x1707, &(0x7f0000000280), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:31 executing program 5: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, &(0x7f0000000340)) 00:20:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080)='802.15.4 MAC\x00', r6) 00:20:31 executing program 0: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, &(0x7f0000000340)) 00:20:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080)='802.15.4 MAC\x00', r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, r8, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x10004000) 00:20:31 executing program 1: r0 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r1 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r2) 00:20:31 executing program 2: syz_io_uring_setup(0x1707, &(0x7f0000000280), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:31 executing program 0: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), 0x0) 00:20:31 executing program 5: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, &(0x7f0000000340)) 00:20:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:31 executing program 1: r0 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r1 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r2) 00:20:31 executing program 5: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, &(0x7f0000000340)) 00:20:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080)='802.15.4 MAC\x00', r6) 00:20:31 executing program 0: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), 0x0) 00:20:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) 00:20:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080)='802.15.4 MAC\x00', r6) [ 337.683506][ T4812] Bluetooth: hci0: command 0x0401 tx timeout 00:20:31 executing program 1: r0 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r1 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r2) 00:20:31 executing program 5: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), 0x0) 00:20:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 00:20:31 executing program 0: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), 0x0) 00:20:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) 00:20:31 executing program 2: r0 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r1 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r2) 00:20:31 executing program 1: r0 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r1 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r2) 00:20:31 executing program 5: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), 0x0) 00:20:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) 00:20:31 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r1 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r2) 00:20:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) 00:20:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) 00:20:32 executing program 5: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), 0x0) 00:20:32 executing program 1: r0 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r1 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r2) 00:20:32 executing program 0: r0 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r1 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r2) 00:20:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 00:20:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) 00:20:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080)='802.15.4 MAC\x00', r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, r8, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x10004000) 00:20:32 executing program 1: r0 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r1 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r2) 00:20:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) 00:20:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080)='802.15.4 MAC\x00', r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, r8, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x10004000) 00:20:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:20:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000001000)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080)='802.15.4 MAC\x00', r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, r8, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x10004000) 00:20:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x74}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) 00:20:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) 00:20:32 executing program 1: r0 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r1 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r2) 00:20:32 executing program 0: r0 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r1 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r2) 00:20:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080) 00:20:32 executing program 2 (fault-call:0 fault-nth:0): syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:32 executing program 5 (fault-call:0 fault-nth:0): syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) 00:20:32 executing program 1: r0 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r1 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r2) 00:20:32 executing program 0 (fault-call:1 fault-nth:0): ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) syz_io_uring_setup(0x1707, &(0x7f0000000280), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 339.030531][T24729] FAULT_INJECTION: forcing a failure. [ 339.030531][T24729] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 339.052213][T24730] FAULT_INJECTION: forcing a failure. [ 339.052213][T24730] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 339.074633][T24729] CPU: 1 PID: 24729 Comm: syz-executor.2 Not tainted 5.12.0-rc5-syzkaller #0 [ 339.083428][T24729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 339.093503][T24729] Call Trace: [ 339.096792][T24729] dump_stack+0x176/0x24e [ 339.101242][T24729] should_fail+0x384/0x4b0 [ 339.105676][T24729] _copy_from_user+0x2d/0x170 [ 339.110369][T24729] __se_sys_io_uring_setup+0x45/0x2b10 [ 339.115881][T24729] ? __context_tracking_exit+0x7a/0xd0 [ 339.121376][T24729] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 339.127356][T24729] ? lockdep_hardirqs_on+0x8d/0x130 [ 339.132579][T24729] do_syscall_64+0x2d/0x70 [ 339.136980][T24729] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 339.142898][T24729] RIP: 0033:0x466459 [ 339.146779][T24729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 339.166368][T24729] RSP: 002b:00007f0bf4d49108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 339.174774][T24729] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 339.182735][T24729] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 0000000000001707 [ 339.190693][T24729] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 339.198651][T24729] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 339.206606][T24729] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffd000 [ 339.227648][T24730] CPU: 1 PID: 24730 Comm: syz-executor.5 Not tainted 5.12.0-rc5-syzkaller #0 [ 339.236443][T24730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 339.246525][T24730] Call Trace: [ 339.249814][T24730] dump_stack+0x176/0x24e [ 339.254165][T24730] should_fail+0x384/0x4b0 [ 339.258603][T24730] _copy_from_user+0x2d/0x170 [ 339.263297][T24730] __se_sys_io_uring_setup+0x45/0x2b10 [ 339.268791][T24730] ? __context_tracking_exit+0x7a/0xd0 [ 339.274290][T24730] ? syscall_enter_from_user_mode+0x2e/0x1c0 00:20:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 339.280285][T24730] ? lockdep_hardirqs_on+0x8d/0x130 [ 339.285516][T24730] do_syscall_64+0x2d/0x70 [ 339.289984][T24730] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 339.296069][T24730] RIP: 0033:0x466459 [ 339.299982][T24730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 339.319601][T24730] RSP: 002b:00007f19f5040108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 339.328032][T24730] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 339.336018][T24730] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 0000000000001707 [ 339.344178][T24730] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 339.352320][T24730] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 339.360303][T24730] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffd000 00:20:33 executing program 1: r0 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r1 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r2) [ 339.394140][T24742] FAULT_INJECTION: forcing a failure. [ 339.394140][T24742] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 339.419992][T24742] CPU: 1 PID: 24742 Comm: syz-executor.0 Not tainted 5.12.0-rc5-syzkaller #0 [ 339.428783][T24742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 339.438870][T24742] Call Trace: 00:20:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) [ 339.442163][T24742] dump_stack+0x176/0x24e [ 339.446532][T24742] should_fail+0x384/0x4b0 [ 339.450982][T24742] _copy_from_user+0x2d/0x170 [ 339.455693][T24742] __se_sys_io_uring_setup+0x45/0x2b10 [ 339.461450][T24742] ? __context_tracking_exit+0x7a/0xd0 [ 339.466939][T24742] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 339.472943][T24742] ? lockdep_hardirqs_on+0x8d/0x130 [ 339.478176][T24742] do_syscall_64+0x2d/0x70 [ 339.482626][T24742] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 339.488540][T24742] RIP: 0033:0x466459 [ 339.492442][T24742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 339.512063][T24742] RSP: 002b:00007fb000f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 339.520493][T24742] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 339.528481][T24742] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 0000000000001707 [ 339.536463][T24742] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 339.544446][T24742] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 339.552428][T24742] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffd000 00:20:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) getitimer(0x0, &(0x7f0000000cc0)) 00:20:33 executing program 5 (fault-call:0 fault-nth:1): syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:33 executing program 2 (fault-call:0 fault-nth:1): syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:33 executing program 0 (fault-call:1 fault-nth:1): ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) syz_io_uring_setup(0x1707, &(0x7f0000000280), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:33 executing program 1: r0 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r1 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r2) [ 339.757229][ T4812] Bluetooth: hci0: command 0x0401 tx timeout [ 339.790365][T24759] FAULT_INJECTION: forcing a failure. [ 339.790365][T24759] name failslab, interval 1, probability 0, space 0, times 1 00:20:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x44}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) [ 339.809775][T24761] FAULT_INJECTION: forcing a failure. [ 339.809775][T24761] name failslab, interval 1, probability 0, space 0, times 1 [ 339.850849][T24765] FAULT_INJECTION: forcing a failure. [ 339.850849][T24765] name failslab, interval 1, probability 0, space 0, times 1 [ 339.868158][T24761] CPU: 0 PID: 24761 Comm: syz-executor.2 Not tainted 5.12.0-rc5-syzkaller #0 [ 339.876954][T24761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 339.887018][T24761] Call Trace: [ 339.890304][T24761] dump_stack+0x176/0x24e [ 339.894654][T24761] should_fail+0x384/0x4b0 [ 339.899084][T24761] ? __se_sys_io_uring_setup+0x2d0/0x2b10 [ 339.904811][T24761] should_failslab+0x5/0x20 [ 339.909417][T24761] kmem_cache_alloc_trace+0x6a/0x350 [ 339.914791][T24761] __se_sys_io_uring_setup+0x2d0/0x2b10 [ 339.920362][T24761] ? __context_tracking_exit+0x7a/0xd0 [ 339.925847][T24761] do_syscall_64+0x2d/0x70 [ 339.930268][T24761] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 339.936177][T24761] RIP: 0033:0x466459 [ 339.940089][T24761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 339.959793][T24761] RSP: 002b:00007f0bf4d49108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 339.968212][T24761] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 339.976193][T24761] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 0000000000001707 [ 339.984178][T24761] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 339.992154][T24761] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 340.000145][T24761] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffd000 [ 340.008135][T24765] CPU: 1 PID: 24765 Comm: syz-executor.0 Not tainted 5.12.0-rc5-syzkaller #0 [ 340.017018][T24765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 340.027076][T24765] Call Trace: [ 340.030359][T24765] dump_stack+0x176/0x24e [ 340.034687][T24765] should_fail+0x384/0x4b0 [ 340.039092][T24765] ? __se_sys_io_uring_setup+0x2d0/0x2b10 [ 340.044804][T24765] should_failslab+0x5/0x20 [ 340.049302][T24765] kmem_cache_alloc_trace+0x6a/0x350 [ 340.054581][T24765] __se_sys_io_uring_setup+0x2d0/0x2b10 [ 340.060119][T24765] ? __context_tracking_exit+0x7a/0xd0 [ 340.065600][T24765] do_syscall_64+0x2d/0x70 [ 340.070005][T24765] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 340.076058][T24765] RIP: 0033:0x466459 [ 340.079940][T24765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:20:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00'}) getitimer(0x0, &(0x7f0000000cc0)) [ 340.099532][T24765] RSP: 002b:00007fb000f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 340.107937][T24765] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 340.115895][T24765] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 0000000000001707 [ 340.123853][T24765] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 340.131830][T24765] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 340.139804][T24765] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffd000 [ 340.167705][T24759] CPU: 0 PID: 24759 Comm: syz-executor.5 Not tainted 5.12.0-rc5-syzkaller #0 [ 340.176516][T24759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 340.186699][T24759] Call Trace: [ 340.189989][T24759] dump_stack+0x176/0x24e [ 340.194338][T24759] should_fail+0x384/0x4b0 [ 340.198772][T24759] ? __se_sys_io_uring_setup+0x2d0/0x2b10 [ 340.204501][T24759] should_failslab+0x5/0x20 [ 340.209103][T24759] kmem_cache_alloc_trace+0x6a/0x350 [ 340.214412][T24759] __se_sys_io_uring_setup+0x2d0/0x2b10 [ 340.219979][T24759] ? __context_tracking_exit+0x7a/0xd0 [ 340.225467][T24759] do_syscall_64+0x2d/0x70 [ 340.229893][T24759] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 340.235797][T24759] RIP: 0033:0x466459 [ 340.239706][T24759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 340.259322][T24759] RSP: 002b:00007f19f5040108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 00:20:34 executing program 1: r0 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x0) r1 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r2) 00:20:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) getitimer(0x0, &(0x7f0000000cc0)) [ 340.267752][T24759] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 340.275741][T24759] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 0000000000001707 [ 340.283724][T24759] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 340.291811][T24759] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 340.299793][T24759] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffd000 00:20:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b80)={'batadv0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) 00:20:34 executing program 2 (fault-call:0 fault-nth:2): syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:34 executing program 1: r0 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x0) r1 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r2) 00:20:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) [ 340.605712][T24796] FAULT_INJECTION: forcing a failure. [ 340.605712][T24796] name failslab, interval 1, probability 0, space 0, times 0 [ 340.626880][T24796] CPU: 0 PID: 24796 Comm: syz-executor.2 Not tainted 5.12.0-rc5-syzkaller #0 [ 340.635779][T24796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 340.645849][T24796] Call Trace: [ 340.649144][T24796] dump_stack+0x176/0x24e [ 340.653499][T24796] should_fail+0x384/0x4b0 [ 340.657936][T24796] ? __se_sys_io_uring_setup+0x381/0x2b10 [ 340.663670][T24796] should_failslab+0x5/0x20 [ 340.668187][T24796] __kmalloc+0x89/0x380 [ 340.672369][T24796] ? __se_sys_io_uring_setup+0x2d0/0x2b10 [ 340.678132][T24796] __se_sys_io_uring_setup+0x381/0x2b10 [ 340.683816][T24796] do_syscall_64+0x2d/0x70 [ 340.688257][T24796] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 340.694174][T24796] RIP: 0033:0x466459 [ 340.698079][T24796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 340.717742][T24796] RSP: 002b:00007f0bf4d49108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 340.726176][T24796] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 340.734160][T24796] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 0000000000001707 [ 340.742141][T24796] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 340.750122][T24796] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 340.758122][T24796] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffd000 00:20:34 executing program 5: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) getitimer(0x0, &(0x7f0000000cc0)) 00:20:34 executing program 0 (fault-call:1 fault-nth:2): ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) syz_io_uring_setup(0x1707, &(0x7f0000000280), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:34 executing program 1: r0 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x0) r1 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r2) 00:20:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) 00:20:34 executing program 2 (fault-call:0 fault-nth:3): syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 340.970139][T24814] FAULT_INJECTION: forcing a failure. [ 340.970139][T24814] name failslab, interval 1, probability 0, space 0, times 0 00:20:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) 00:20:34 executing program 5: syz_io_uring_setup(0x170d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 341.039538][T24814] CPU: 0 PID: 24814 Comm: syz-executor.0 Not tainted 5.12.0-rc5-syzkaller #0 [ 341.048349][T24814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.058414][T24814] Call Trace: [ 341.061703][T24814] dump_stack+0x176/0x24e [ 341.066056][T24814] should_fail+0x384/0x4b0 [ 341.070498][T24814] ? __se_sys_io_uring_setup+0x381/0x2b10 [ 341.076236][T24814] should_failslab+0x5/0x20 [ 341.080757][T24814] __kmalloc+0x89/0x380 [ 341.084924][T24814] ? __se_sys_io_uring_setup+0x2d0/0x2b10 [ 341.090668][T24814] __se_sys_io_uring_setup+0x381/0x2b10 [ 341.096267][T24814] do_syscall_64+0x2d/0x70 [ 341.100701][T24814] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 341.106608][T24814] RIP: 0033:0x466459 [ 341.110513][T24814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 341.130131][T24814] RSP: 002b:00007fb000f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 00:20:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) [ 341.138560][T24814] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 341.146544][T24814] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 0000000000001707 [ 341.154524][T24814] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 341.162506][T24814] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 341.170487][T24814] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffd000 00:20:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) getitimer(0x0, &(0x7f0000000cc0)) [ 341.193568][T24829] FAULT_INJECTION: forcing a failure. [ 341.193568][T24829] name failslab, interval 1, probability 0, space 0, times 0 [ 341.225681][T24829] CPU: 0 PID: 24829 Comm: syz-executor.2 Not tainted 5.12.0-rc5-syzkaller #0 00:20:35 executing program 1: r0 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r1 = syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r2) [ 341.234483][T24829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.245257][T24829] Call Trace: [ 341.248549][T24829] dump_stack+0x176/0x24e [ 341.252901][T24829] should_fail+0x384/0x4b0 [ 341.257340][T24829] ? percpu_ref_init+0xce/0x300 [ 341.262209][T24829] should_failslab+0x5/0x20 [ 341.266725][T24829] kmem_cache_alloc_trace+0x6a/0x350 [ 341.272039][T24829] percpu_ref_init+0xce/0x300 [ 341.276745][T24829] ? trace_io_uring_create+0x250/0x250 [ 341.282230][T24829] __se_sys_io_uring_setup+0x3f6/0x2b10 [ 341.287829][T24829] do_syscall_64+0x2d/0x70 00:20:35 executing program 5: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 341.292266][T24829] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 341.299480][T24829] RIP: 0033:0x466459 [ 341.303385][T24829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 341.323101][T24829] RSP: 002b:00007f0bf4d49108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 341.331536][T24829] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 341.339524][T24829] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 0000000000001707 [ 341.347597][T24829] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 341.355581][T24829] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 341.363566][T24829] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffd000 00:20:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) 00:20:35 executing program 1: r0 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r1 = syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r2) 00:20:35 executing program 0 (fault-call:1 fault-nth:3): ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) syz_io_uring_setup(0x1707, &(0x7f0000000280), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) getitimer(0x0, &(0x7f0000000cc0)) 00:20:35 executing program 5: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) 00:20:35 executing program 1: r0 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r1 = syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x1776, 0x0, 0x3, 0x122, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r2) 00:20:35 executing program 2 (fault-call:0 fault-nth:4): syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:35 executing program 1: syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r0 = syz_io_uring_setup(0x56cb, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r1) [ 341.791393][T24859] FAULT_INJECTION: forcing a failure. [ 341.791393][T24859] name failslab, interval 1, probability 0, space 0, times 0 [ 341.837392][ T9430] Bluetooth: hci0: command 0x0401 tx timeout [ 341.844434][T24864] FAULT_INJECTION: forcing a failure. [ 341.844434][T24864] name failslab, interval 1, probability 0, space 0, times 0 [ 341.877183][T24859] CPU: 0 PID: 24859 Comm: syz-executor.2 Not tainted 5.12.0-rc5-syzkaller #0 00:20:35 executing program 5: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 341.886094][T24859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.896156][T24859] Call Trace: [ 341.899444][T24859] dump_stack+0x176/0x24e [ 341.903795][T24859] should_fail+0x384/0x4b0 [ 341.908230][T24859] ? percpu_ref_init+0xce/0x300 [ 341.913097][T24859] should_failslab+0x5/0x20 [ 341.917611][T24859] kmem_cache_alloc_trace+0x6a/0x350 [ 341.922925][T24859] percpu_ref_init+0xce/0x300 [ 341.927618][T24859] ? trace_io_uring_create+0x250/0x250 00:20:35 executing program 1: syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r0 = syz_io_uring_setup(0x56cb, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r1) [ 341.933100][T24859] __se_sys_io_uring_setup+0x3f6/0x2b10 [ 341.938698][T24859] do_syscall_64+0x2d/0x70 [ 341.943129][T24859] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 341.951290][T24859] RIP: 0033:0x466459 [ 341.955202][T24859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 341.974819][T24859] RSP: 002b:00007f0bf4d49108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 00:20:35 executing program 5: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x200000, 0x0) getitimer(0x0, &(0x7f0000000cc0)) 00:20:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_io_uring_complete(0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) [ 341.983250][T24859] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 341.991231][T24859] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 0000000000001707 [ 341.999220][T24859] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 342.007205][T24859] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 342.015193][T24859] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffd000 [ 342.061819][T24864] CPU: 0 PID: 24864 Comm: syz-executor.0 Not tainted 5.12.0-rc5-syzkaller #0 [ 342.070621][T24864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 342.080688][T24864] Call Trace: [ 342.083979][T24864] dump_stack+0x176/0x24e [ 342.088352][T24864] should_fail+0x384/0x4b0 [ 342.092788][T24864] ? percpu_ref_init+0xce/0x300 [ 342.097657][T24864] should_failslab+0x5/0x20 [ 342.102173][T24864] kmem_cache_alloc_trace+0x6a/0x350 [ 342.107485][T24864] percpu_ref_init+0xce/0x300 [ 342.112223][T24864] ? trace_io_uring_create+0x250/0x250 [ 342.117706][T24864] __se_sys_io_uring_setup+0x3f6/0x2b10 [ 342.123391][T24864] do_syscall_64+0x2d/0x70 [ 342.127826][T24864] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 342.133767][T24864] RIP: 0033:0x466459 [ 342.137674][T24864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 342.157289][T24864] RSP: 002b:00007fb000f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 342.165724][T24864] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 342.173709][T24864] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 0000000000001707 [ 342.181689][T24864] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 342.192797][T24864] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 342.200783][T24864] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffd000 00:20:36 executing program 0 (fault-call:1 fault-nth:4): ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) syz_io_uring_setup(0x1707, &(0x7f0000000280), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) 00:20:36 executing program 2 (fault-call:0 fault-nth:5): syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x350}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:36 executing program 1: syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r0 = syz_io_uring_setup(0x56cb, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r1) 00:20:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000100)=0x1) getitimer(0x0, &(0x7f0000000cc0)) 00:20:36 executing program 5: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 342.455282][T24895] FAULT_INJECTION: forcing a failure. [ 342.455282][T24895] name fail_page_alloc, interval 1, probability 0, space 0, times 1 00:20:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_io_uring_complete(0x0) getitimer(0x0, &(0x7f0000000cc0)) 00:20:36 executing program 5: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x6, 0x0, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) [ 342.504363][T24898] FAULT_INJECTION: forcing a failure. [ 342.504363][T24898] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 342.523852][T24895] CPU: 0 PID: 24895 Comm: syz-executor.0 Not tainted 5.12.0-rc5-syzkaller #0 [ 342.532652][T24895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 342.543250][T24895] Call Trace: [ 342.546547][T24895] dump_stack+0x176/0x24e [ 342.550903][T24895] should_fail+0x384/0x4b0 [ 342.555338][T24895] prepare_alloc_pages+0x1ca/0x5b0 [ 342.561271][T24895] __alloc_pages_nodemask+0xb6/0x500 [ 342.566580][T24895] __get_free_pages+0x8/0x30 [ 342.571191][T24895] __se_sys_io_uring_setup+0xe40/0x2b10 [ 342.576796][T24895] do_syscall_64+0x2d/0x70 [ 342.581219][T24895] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 342.587124][T24895] RIP: 0033:0x466459 [ 342.591021][T24895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 342.610637][T24895] RSP: 002b:00007fb000f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 342.619068][T24895] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 342.627049][T24895] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 0000000000001707 [ 342.635022][T24895] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 342.643005][T24895] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 342.651011][T24895] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffd000 [ 342.664259][T24898] CPU: 1 PID: 24898 Comm: syz-executor.2 Not tainted 5.12.0-rc5-syzkaller #0 [ 342.673053][T24898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 342.683144][T24898] Call Trace: [ 342.686429][T24898] dump_stack+0x176/0x24e [ 342.690763][T24898] should_fail+0x384/0x4b0 [ 342.695170][T24898] prepare_alloc_pages+0x1ca/0x5b0 [ 342.700274][T24898] __alloc_pages_nodemask+0xb6/0x500 [ 342.705570][T24898] __get_free_pages+0x8/0x30 [ 342.710147][T24898] __se_sys_io_uring_setup+0xfd3/0x2b10 [ 342.715716][T24898] do_syscall_64+0x2d/0x70 [ 342.720124][T24898] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 342.726020][T24898] RIP: 0033:0x466459 [ 342.729902][T24898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:20:36 executing program 1: r0 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r1 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x122, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r2) 00:20:36 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) [ 342.749494][T24898] RSP: 002b:00007f0bf4d49108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 342.757895][T24898] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 342.765854][T24898] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 0000000000001707 [ 342.773814][T24898] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 342.781771][T24898] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 342.789730][T24898] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffd000 00:20:36 executing program 5: syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0x7, 0x0, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:20:36 executing program 1: r0 = syz_io_uring_complete(0x0) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r1 = syz_io_uring_setup(0x56cb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x122, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1707, &(0x7f0000000280)={0x0, 0xb47f, 0x0, 0x3, 0x350, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_complete(r2) [ 343.081991][T24898] general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] PREEMPT SMP KASAN [ 343.093726][T24898] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 343.102139][T24898] CPU: 0 PID: 24898 Comm: syz-executor.2 Not tainted 5.12.0-rc5-syzkaller #0 [ 343.110900][T24898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 343.120955][T24898] RIP: 0010:io_commit_cqring+0x368/0x8f0 [ 343.126687][T24898] Code: 40 04 00 00 48 89 e8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 ef e8 78 df de ff bb c0 00 00 00 48 03 5d 00 48 89 d8 48 c1 e8 03 <42> 8a 04 28 84 c0 4c 89 ed 0f 85 ed 04 00 00 44 89 33 49 83 c7 78 [ 343.146304][T24898] RSP: 0018:ffffc90001aa7cd8 EFLAGS: 00010006 [ 343.152377][T24898] RAX: 0000000000000018 RBX: 00000000000000c0 RCX: 0000000000040000 [ 343.160439][T24898] RDX: ffffc9000d0d4000 RSI: 000000000003ffff RDI: ffff88805b1de600 [ 343.168498][T24898] RBP: ffff88805b1de440 R08: dffffc0000000000 R09: fffff52000354f9a [ 343.176471][T24898] R10: fffff52000354f9a R11: 0000000000000000 R12: ffff88805b1de088 [ 343.184436][T24898] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88805b1de000 [ 343.192593][T24898] FS: 00007f0bf4d49700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 343.201508][T24898] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.208065][T24898] CR2: 0000001b30721000 CR3: 0000000014e56000 CR4: 00000000001506f0 [ 343.216012][T24898] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 343.223956][T24898] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 343.231915][T24898] Call Trace: [ 343.235175][T24898] io_kill_timeouts+0xfc/0x140 [ 343.239939][T24898] io_ring_ctx_wait_and_kill+0x218/0x360 [ 343.245548][T24898] __se_sys_io_uring_setup+0x1132/0x2b10 [ 343.251176][T24898] do_syscall_64+0x2d/0x70 [ 343.255571][T24898] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 343.261438][T24898] RIP: 0033:0x466459 [ 343.265307][T24898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 343.285086][T24898] RSP: 002b:00007f0bf4d49108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 343.293483][T24898] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 343.301962][T24898] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 0000000000001707 [ 343.309919][T24898] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 343.317871][T24898] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 343.325832][T24898] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffd000 [ 343.334257][T24898] Modules linked in: [ 343.338152][T24898] ---[ end trace 48ffc90c2cc6223b ]--- [ 343.338233][T24895] general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#2] PREEMPT SMP KASAN [ 343.343597][T24898] RIP: 0010:io_commit_cqring+0x368/0x8f0 [ 343.355290][T24895] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 343.360913][T24898] Code: 40 04 00 00 48 89 e8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 ef e8 78 df de ff bb c0 00 00 00 48 03 5d 00 48 89 d8 48 c1 e8 03 <42> 8a 04 28 84 c0 4c 89 ed 0f 85 ed 04 00 00 44 89 33 49 83 c7 78 [ 343.369473][T24895] CPU: 1 PID: 24895 Comm: syz-executor.0 Tainted: G D 5.12.0-rc5-syzkaller #0 [ 343.393135][T24898] RSP: 0018:ffffc90001aa7cd8 EFLAGS: 00010006 [ 343.403769][T24895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 343.403782][T24895] RIP: 0010:io_commit_cqring+0x368/0x8f0 [ 343.409843][T24898] RAX: 0000000000000018 RBX: 00000000000000c0 RCX: 0000000000040000 [ 343.419978][T24895] Code: 40 04 00 00 48 89 e8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 ef e8 78 df de ff bb c0 00 00 00 48 03 5d 00 48 89 d8 48 c1 e8 03 <42> 8a 04 28 84 c0 4c 89 ed 0f 85 ed 04 00 00 44 89 33 49 83 c7 78 [ 343.425602][T24898] RDX: ffffc9000d0d4000 RSI: 000000000003ffff RDI: ffff88805b1de600 [ 343.433550][T24895] RSP: 0018:ffffc90017c27cd8 EFLAGS: 00010006 [ 343.453736][T24898] RBP: ffff88805b1de440 R08: dffffc0000000000 R09: fffff52000354f9a [ 343.462135][T24895] [ 343.462140][T24895] RAX: 0000000000000018 RBX: 00000000000000c0 RCX: 0000000000040000 [ 343.468187][T24898] R10: fffff52000354f9a R11: 0000000000000000 R12: ffff88805b1de088 [ 343.476142][T24895] RDX: ffffc90001c31000 RSI: 000000000002ce85 RDI: ffff88805c042600 [ 343.478538][T24898] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88805b1de000 [ 343.486485][T24895] RBP: ffff88805c042440 R08: dffffc0000000000 R09: fffff52002f84f9a [ 343.494449][T24898] FS: 00007f0bf4d49700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 343.502398][T24895] R10: fffff52002f84f9a R11: 0000000000000000 R12: ffff88805c042088 [ 343.510377][T24898] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.518337][T24895] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88805c042000 [ 343.527247][T24898] CR2: 0000001b30721000 CR3: 0000000014e56000 CR4: 00000000001506f0 [ 343.535197][T24895] FS: 00007fb000f88700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 343.541775][T24898] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 343.549721][T24895] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.557686][T24898] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 343.566675][T24895] CR2: 0000564046e6a378 CR3: 000000002bad4000 CR4: 00000000001506e0 [ 343.574643][T24898] Kernel panic - not syncing: Fatal exception [ 343.581203][T24895] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 343.612128][T24895] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 343.620090][T24895] Call Trace: [ 343.623359][T24895] io_kill_timeouts+0xfc/0x140 [ 343.628117][T24895] io_ring_ctx_wait_and_kill+0x218/0x360 [ 343.633744][T24895] __se_sys_io_uring_setup+0x1132/0x2b10 [ 343.639373][T24895] do_syscall_64+0x2d/0x70 [ 343.643777][T24895] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 343.649657][T24895] RIP: 0033:0x466459 [ 343.653539][T24895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 343.673127][T24895] RSP: 002b:00007fb000f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 343.681532][T24895] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 343.689488][T24895] RDX: 0000000020ffb000 RSI: 0000000020000280 RDI: 0000000000001707 [ 343.697442][T24895] RBP: 0000000020000280 R08: 0000000020000340 R09: 0000000020000340 [ 343.705395][T24895] R10: 0000000020000300 R11: 0000000000000202 R12: 0000000020000340 [ 343.713349][T24895] R13: 0000000020ffb000 R14: 0000000020000300 R15: 0000000020ffd000 [ 343.721307][T24895] Modules linked in: [ 343.725189][T24895] ---[ end trace 48ffc90c2cc6223c ]--- [ 343.730624][T24895] RIP: 0010:io_commit_cqring+0x368/0x8f0 [ 343.736242][T24895] Code: 40 04 00 00 48 89 e8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 ef e8 78 df de ff bb c0 00 00 00 48 03 5d 00 48 89 d8 48 c1 e8 03 <42> 8a 04 28 84 c0 4c 89 ed 0f 85 ed 04 00 00 44 89 33 49 83 c7 78 [ 343.755828][T24895] RSP: 0018:ffffc90001aa7cd8 EFLAGS: 00010006 [ 343.761902][T24895] RAX: 0000000000000018 RBX: 00000000000000c0 RCX: 0000000000040000 [ 343.769857][T24895] RDX: ffffc9000d0d4000 RSI: 000000000003ffff RDI: ffff88805b1de600 [ 343.777812][T24895] RBP: ffff88805b1de440 R08: dffffc0000000000 R09: fffff52000354f9a [ 343.785766][T24895] R10: fffff52000354f9a R11: 0000000000000000 R12: ffff88805b1de088 [ 343.793835][T24895] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88805b1de000 [ 343.801808][T24895] FS: 00007fb000f88700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 343.810723][T24895] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.817290][T24895] CR2: 0000564046e6a378 CR3: 000000002bad4000 CR4: 00000000001506e0 [ 343.825250][T24895] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 343.833204][T24895] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 344.710175][T24898] Shutting down cpus with NMI [ 344.715510][T24898] Kernel Offset: disabled [ 344.719824][T24898] Rebooting in 86400 seconds..