(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:25:43 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) 19:25:43 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r0, &(0x7f0000002080)={0x20, 0x0, r1}, 0x20) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r0, &(0x7f00000046c0)={0x90, 0x0, r3}, 0x90) 19:25:43 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001680)={'wg1\x00'}) 19:25:43 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000500)=@raw=[@btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @exit, @jmp={0x5, 0x1, 0x8, 0x0, 0x2, 0xfffffffffffffff8, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x7}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x80, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 19:25:43 executing program 2: io_setup(0xf767, &(0x7f0000000000)) io_setup(0x2, &(0x7f00000041c0)) io_setup(0x7, &(0x7f0000000100)) io_setup(0x9, &(0x7f00000000c0)) 19:25:43 executing program 4: openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000005c0), 0x80800) 19:25:43 executing program 5: io_setup(0x2, &(0x7f00000041c0)=0x0) io_destroy(r0) 19:25:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="9d55531017000000000000b703a5f6f9"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:25:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c}, 0x1c}}, 0x0) 19:25:44 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x0, 0x0, 0x0, @generic}) 19:25:44 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x200]}, 0x8}) 19:25:44 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x0, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:25:44 executing program 5: syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x2003) 19:25:44 executing program 2: io_setup(0x2, &(0x7f00000041c0)) 19:25:44 executing program 3: select(0x40, &(0x7f00000006c0), 0x0, 0x0, &(0x7f00000007c0)) 19:25:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={0x68, 0x0, 0x4, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}}, 0x68}}, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020}, 0x2020) 19:25:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 19:25:44 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000040c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000004180)={&(0x7f0000004080), 0xc, &(0x7f0000004140)={&(0x7f0000004100)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'nr0\x00'}}}}}, 0x30}}, 0x0) 19:25:44 executing program 0: sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(r0, &(0x7f0000001480)={0x2020}, 0x2020) syz_genetlink_get_family_id$tipc(&(0x7f00000040c0), r0) 19:25:44 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:25:44 executing program 4: io_cancel(0x0, &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 19:25:45 executing program 5: io_setup(0x2, &(0x7f00000041c0)=0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) io_submit(r0, 0x2, &(0x7f00000024c0)=[&(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x0]) 19:25:45 executing program 3: io_setup(0xf767, &(0x7f0000000000)) [ 810.552421][T12962] tipc: Enabling of bearer rejected, failed to enable media 19:25:45 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x0, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:25:45 executing program 2: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) 19:25:45 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000002180)={0x18}, 0x18) 19:25:45 executing program 5: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) 19:25:45 executing program 4: r0 = socket(0x2, 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 19:25:45 executing program 4: io_setup(0x2, &(0x7f00000041c0)=0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) io_submit(r0, 0x3, &(0x7f00000024c0)=[&(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x3}, 0x0, 0x0]) 19:25:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x7, 0x0, "5f61a327389872c9f529043465e6a051ad7b1ccd56402d4a42b582fbfc8f21d51265d9941d893114a02bf081cfe5b51840b7ffbf4c092fadf43403fcb249b4b0da4b68c318b633cf61fba34e86c8ee04"}, 0xd8) 19:25:45 executing program 0: r0 = socket(0x2, 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000380)={0x0}}, 0x0) 19:25:45 executing program 5: io_setup(0xc, &(0x7f0000000040)=0x0) io_destroy(r0) 19:25:45 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000000)=@raw=[@map_idx_val], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:25:46 executing program 2: syz_emit_ethernet(0x32, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x0, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, "1300f4", 0x0, "888d39"}}}}}}, 0x0) 19:25:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000005380)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x845, 0x1}, 0x48) [ 811.699469][T13000] dccp_invalid_packet: P.Data Offset(5) too large 19:25:46 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000001940), 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, 0x0, 0x0) 19:25:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r0, 0x11, r0) 19:25:46 executing program 4: syz_open_dev$mouse(0x0, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000740)="0f322e0f094c0fc7ae5e1d14c4c7442400f6ffffffc4025d3c6ff9c744240600000000c4c2f59b13b9710500000f320f21d5c7442400b4000000c744240200400000c7442406000000000f011c2466baf80cb8c636638bef66bafc0c66b829018ed066ef0f01c5c744240000300000c74424024b530000c74424060000000f011c24", 0x82}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) process_vm_writev(0x0, &(0x7f0000c22000)=[{0x0}], 0x1, &(0x7f0000c22fa0)=[{0x0}], 0x1, 0x0) 19:25:46 executing program 2: socket(0x22, 0x0, 0xfff) 19:25:46 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x0, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:25:46 executing program 3: io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0xf767, &(0x7f0000000000)) io_setup(0x2, &(0x7f00000041c0)) io_setup(0x7, 0x0) 19:25:46 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 19:25:47 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000440), 0x0, 0x0) write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0) 19:25:47 executing program 5: select(0x40, &(0x7f00000006c0), 0x0, &(0x7f0000000780)={0x41724390}, 0x0) 19:25:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000016c0), 0x4) 19:25:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x204, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz2\x00'}}}}, 0x34}}, 0x0) 19:25:47 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="2748e247f6a0d800", 0x10) 19:25:47 executing program 0: select(0x40, &(0x7f00000006c0), 0x0, 0x0, 0x0) 19:25:47 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002140)={&(0x7f0000002100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 19:25:47 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001580)={0x0}, 0x10) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001780), 0x0, 0x0) read$snapshot(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000003340)) 19:25:47 executing program 3: io_setup(0x6, &(0x7f0000000000)=0x0) io_destroy(r0) io_setup(0x2, &(0x7f00000041c0)=0x0) io_cancel(r1, &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_destroy(r0) [ 813.837227][ T1217] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.843636][ T1217] ieee802154 phy1 wpan1: encryption failed: -22 19:25:50 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:25:50 executing program 5: r0 = socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)) 19:25:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000001640)={0x1, &(0x7f0000001600)=[{0x1}]}) 19:25:50 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001580)={0x0}, 0x10) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001780), 0x0, 0x0) read$snapshot(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000003340)) 19:25:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000045c0)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x45000800}, 0xc, &(0x7f0000002340)={&(0x7f00000047c0)={0x14}, 0x14}}, 0x0) 19:25:50 executing program 0: io_setup(0xd50, &(0x7f0000000200)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 19:25:50 executing program 5: sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000004040)={&(0x7f0000003f80), 0xc, 0x0}, 0x0) io_setup(0x2, &(0x7f00000041c0)) 19:25:50 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) 19:25:50 executing program 0: syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) 19:25:50 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000001740)={&(0x7f00000012c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000001640)=[{0x0}, {0x0}], 0x2}, 0x22) 19:25:50 executing program 3: add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc4}, &(0x7f00000003c0)={0x0, "ff4d1de3f9cabda1a6ffcaa9e45ab495daae666e68d713a68cafa5764ddd634fbc8164c6326d9c4bb4427028f1ed494d424543de53e374d7368d59c64c953a88"}, 0x48, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) 19:25:50 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/bus/gadget', 0x0, 0x0) 19:25:51 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:25:51 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000001740)={&(0x7f00000012c0)=@sco={0x1f, @none}, 0x80, 0x0}, 0x22) 19:25:51 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/bus/gadget', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 19:25:51 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000780), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) 19:25:51 executing program 5: r0 = fsopen(&(0x7f0000000000)='nfsd\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='%[.{){}.{&)]*\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) 19:25:51 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x3, &(0x7f0000000880)=@framed, &(0x7f00000008c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) add_key$keyring(&(0x7f0000000b00), &(0x7f0000000b40)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 19:25:51 executing program 5: r0 = fsopen(&(0x7f0000000000)='nfsd\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='%[.{){}.{&)]*\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) 19:25:51 executing program 0: r0 = memfd_secret(0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000001c0)='silent\x00', 0x0, 0x0) 19:25:51 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x3, &(0x7f0000000880)=@framed, &(0x7f00000008c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0), 0x10}, 0x80) 19:25:51 executing program 4: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 19:25:51 executing program 0: mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000002, 0x120013, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x4000)=nil) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000080)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0xa}, @ldst={0x0, 0x2, 0x2, 0x0, 0x0, 0x50, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x4f}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000100)=""/155, 0x41000, 0x16, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x4, 0x4, 0x1}, 0x10}, 0x80) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/module/cpufreq', 0x0, 0x123) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x930, 0x6000003, 0x10, r0, 0x0) 19:25:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x6c00, 0x0) 19:25:52 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:25:52 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 19:25:52 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) 19:25:52 executing program 0: syz_clone(0xc8040000, 0x0, 0x0, 0x0, 0x0, 0x0) 19:25:52 executing program 2: syz_open_dev$vcsa(&(0x7f0000000640), 0x0, 0x0) 19:25:52 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x0, 0x0, 0x0) 19:25:52 executing program 3: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) 19:25:52 executing program 2: syz_open_dev$vcsa(&(0x7f0000000b80), 0x1000, 0x200000) 19:25:52 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/bus/virtio', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) 19:25:52 executing program 3: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x4000)=nil) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 19:25:52 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b40)='/sys/kernel/rcu_expedited', 0x0, 0x0) 19:25:53 executing program 5: syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x80641) 19:25:53 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x0, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:25:53 executing program 4: syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/module/cpufreq', 0x0, 0x0) 19:25:53 executing program 0: syz_open_dev$mouse(&(0x7f0000002a00), 0x0, 0x0) 19:25:53 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) 19:25:53 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000080)=@raw=[@map_idx, @ldst={0x0, 0x0, 0x2}, @call], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x9b, &(0x7f0000000100)=""/155, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:25:53 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "194c63b8922af988552640d82049613693fe7624c07753d8ccf8ed97e7fa388a", 0xffffffffffffffff}) io_setup(0x5, &(0x7f0000002e80)=0x0) io_submit(r2, 0x3, &(0x7f00000034c0)=[&(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0]) 19:25:53 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="9201000072190108710402035e35000000010902120001000000000904"], 0x0) 19:25:53 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000000)={0x0, "1389c1dfd5840d04364550e2000000fe05000000000500008a6da9ed54b4637694f405ab1909dfd86cfc61151c00"}, 0x48, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0) 19:25:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=@base={0x1, 0x71c, 0x80, 0x7, 0x5}, 0x48) 19:25:53 executing program 2: io_setup(0x81, &(0x7f0000000380)) syz_open_dev$vcsa(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, 0x0) syz_open_dev$vcsa(&(0x7f0000000fc0), 0x0, 0x0) 19:25:53 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x101141, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x0, 0x0) read$watch_queue(r0, &(0x7f00000016c0)=""/112, 0x70) 19:25:53 executing program 3: msgsnd(0x0, &(0x7f0000000000), 0x4, 0x0) [ 819.635162][ T5105] usb 5-1: new high-speed USB device number 7 using dummy_hcd 19:25:54 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x0, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:25:54 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000400)) 19:25:54 executing program 3: syz_emit_ethernet(0x38, &(0x7f0000000140)={@local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "055de0", 0x2, 0x0, 0x0, @local, @local, {[], "35ef"}}}}}, 0x0) 19:25:54 executing program 5: io_setup(0xc, &(0x7f0000000040)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)) 19:25:54 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "194c63b8922af988552640d82049613693fe7624c07753d8ccf8ed97e7fa388a"}) sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x20100) r1 = socket(0x11, 0x3, 0x9) syz_genetlink_get_family_id$tipc(&(0x7f0000002940), r1) syz_open_dev$vcsu(&(0x7f0000002980), 0x100, 0x22800) io_setup(0x5, &(0x7f0000002e80)) 19:25:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40086602, &(0x7f0000000180)={'ip6_vti0\x00'}) [ 819.874509][T13169] binder: 13164:13169 ioctl c018620c 20000400 returned -1 [ 819.884991][ T5105] usb 5-1: Using ep0 maxpacket: 8 [ 820.005260][ T5105] usb 5-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 820.047727][ T5105] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.076460][ T5105] usb 5-1: config 0 descriptor?? [ 820.117819][ T5105] pwc: Philips PCA645VC USB webcam detected. [ 820.335056][ T5105] pwc: send_video_command error -71 [ 820.340304][ T5105] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 820.358650][ T5105] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 820.378673][ T5105] usb 5-1: USB disconnect, device number 7 19:25:55 executing program 5: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r0, 0x0, 0x0) 19:25:55 executing program 2: syz_io_uring_setup(0x6abb, &(0x7f0000000680), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x5000)=nil, &(0x7f0000000700), &(0x7f0000000740)) 19:25:55 executing program 0: syz_io_uring_setup(0x5c5b, &(0x7f0000000580)={0x0, 0x0, 0x8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 19:25:55 executing program 3: syz_io_uring_setup(0x5c5b, &(0x7f0000000580)={0x0, 0xf28b}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000600), 0x0) syz_io_uring_setup(0x6abb, &(0x7f0000000680), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x5000)=nil, &(0x7f0000000700), &(0x7f0000000740)) 19:25:55 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x0, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:25:55 executing program 4: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff) 19:25:55 executing program 2: syz_io_uring_setup(0x5c5b, &(0x7f0000000580)={0x0, 0xf28b}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6abb, &(0x7f0000000680), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x5000)=nil, &(0x7f0000000700), &(0x7f0000000740)) 19:25:55 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000500), 0x0, 0x0) syz_io_uring_setup(0x5c5b, &(0x7f0000000580)={0x0, 0xf28b, 0x8, 0x1, 0x36a}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 19:25:55 executing program 5: syz_io_uring_setup(0x6abb, &(0x7f0000000680), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x5000)=nil, 0x0, 0x0) 19:25:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = dup3(r2, r3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x1000000000000010, 0x80802, 0x0) write(r7, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f5110800010002000000080002800100b0ed", 0x24) splice(r7, 0x0, r6, 0x0, 0x101ff, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket(0x1000000000000010, 0x80802, 0x0) write(r10, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f5110800010002000000080002800100b0ed", 0x24) socket$inet6_udplite(0xa, 0x2, 0x88) splice(r10, 0x0, r9, 0x0, 0x101ff, 0x0) r11 = fsmount(0xffffffffffffffff, 0x0, 0x41) r12 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7e0, 0x48400) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = socket(0x1000000000000010, 0x80802, 0x0) write(r14, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f5110800010002000000080002800100b0ed", 0x24) splice(r14, 0x0, r13, 0x0, 0x101ff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@map_fd={0x18, 0x9, 0x1, 0x0, r5}, @map_idx_val={0x18, 0xe, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, &(0x7f0000000240), 0x41000, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xb, 0x9d61, 0x2}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)=[r6, r8, 0x1, r9, r11, 0x1, r12, r13, 0x1]}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x25, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 19:25:55 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) r1 = socket(0x10, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl1\x00', r3, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r4, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @mcast2={0xff, 0x5}}}) 19:25:55 executing program 0: syz_io_uring_setup(0x5c5b, &(0x7f0000000580)={0x0, 0xf28b, 0x8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6abb, &(0x7f0000000680), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x5000)=nil, &(0x7f0000000700), 0x0) 19:25:55 executing program 2: syz_io_uring_setup(0x5c5b, &(0x7f0000000580), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6abb, &(0x7f0000000680), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x5000)=nil, &(0x7f0000000700), &(0x7f0000000740)) 19:25:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000100)=0x2, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendto$packet(r1, &(0x7f00000002c0)="3dae7f00000800000000031c0b1e", 0xe, 0x0, &(0x7f0000000280)={0x11, 0x0, r3}, 0x14) [ 821.191284][T13201] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 821.340993][T13201] veth3: entered promiscuous mode 19:25:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='['], 0x70}}, 0x0) 19:25:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @raw_data="34580b4250701fff12120bd0bc6b535745d3f77f1c89f216f6ce916961207455ab29204522c8171f28216c23e3987b5f0aa6f23901580d03c3df4e38c24189d0823921e39c258527f6f3060a526b89218a91cb45e4b09b14b5cdc298af733d84baf0016abf3f0bd97f9999cbb65827aa3b6a9cad7370c88ec1990f06d2fbb4da01ef61b5a2f578cd2a2f3a39109925930bbe974198963a3b6268cd643e7c0c5b37d6cb3a9cc8e1b0f6f724335ce3e5095b6a2d52a4be18ecccb1270ab27ba39f9489b28b9ba75c4e"}) 19:25:58 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x0, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:25:58 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$can_j1939(r0, 0x0, 0x0) 19:25:58 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) 19:25:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = dup3(r2, r3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x1000000000000010, 0x80802, 0x0) write(r7, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f5110800010002000000080002800100b0ed", 0x24) splice(r7, 0x0, r6, 0x0, 0x101ff, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket(0x1000000000000010, 0x80802, 0x0) write(r10, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f5110800010002000000080002800100b0ed", 0x24) socket$inet6_udplite(0xa, 0x2, 0x88) splice(r10, 0x0, r9, 0x0, 0x101ff, 0x0) r11 = fsmount(0xffffffffffffffff, 0x0, 0x41) r12 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7e0, 0x48400) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = socket(0x1000000000000010, 0x80802, 0x0) write(r14, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f5110800010002000000080002800100b0ed", 0x24) splice(r14, 0x0, r13, 0x0, 0x101ff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@map_fd={0x18, 0x9, 0x1, 0x0, r5}, @map_idx_val={0x18, 0xe, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, &(0x7f0000000240), 0x41000, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xb, 0x9d61, 0x2}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)=[r6, r8, 0x1, r9, r11, 0x1, r12, r13, 0x1]}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x25, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 19:25:58 executing program 0: openat$full(0xffffffffffffff9c, 0x0, 0x404001, 0x0) 19:25:58 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x6c, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a, 0x1, 0x1, 0xaf, 0x0, 0x65, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x0, "dd96"}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0xd03e, 0x7, 0x2}, [@mdlm={0x15}, @country_functional={0x8, 0x24, 0x7, 0xaa, 0x0, [0x8]}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0xff, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0xe8}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x0, 0x4, 0xff, 0x0, 0x3}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4}}]}) 19:25:58 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 19:25:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="9d55531017000014010000b702a5f6f922500812540d416ecfc9e1"], 0x208e24b) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:25:58 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x2, 0x0, 0x0, 0xcf}]}) [ 824.295460][T13227] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:25:59 executing program 2: unshare(0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x11400, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) [ 824.540350][T13227] veth5: entered promiscuous mode 19:25:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = dup3(r2, r3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x1000000000000010, 0x80802, 0x0) write(r7, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f5110800010002000000080002800100b0ed", 0x24) splice(r7, 0x0, r6, 0x0, 0x101ff, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket(0x1000000000000010, 0x80802, 0x0) write(r10, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f5110800010002000000080002800100b0ed", 0x24) socket$inet6_udplite(0xa, 0x2, 0x88) splice(r10, 0x0, r9, 0x0, 0x101ff, 0x0) r11 = fsmount(0xffffffffffffffff, 0x0, 0x41) r12 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7e0, 0x48400) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = socket(0x1000000000000010, 0x80802, 0x0) write(r14, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f5110800010002000000080002800100b0ed", 0x24) splice(r14, 0x0, r13, 0x0, 0x101ff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@map_fd={0x18, 0x9, 0x1, 0x0, r5}, @map_idx_val={0x18, 0xe, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, &(0x7f0000000240), 0x41000, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xb, 0x9d61, 0x2}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)=[r6, r8, 0x1, r9, r11, 0x1, r12, r13, 0x1]}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x25, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 824.584953][T11833] usb 6-1: new high-speed USB device number 14 using dummy_hcd 19:25:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="9d55531017000014010000b702a5f6f922500812540d416ecfc9e1"], 0x208e24b) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 824.745023][T11835] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 824.877947][T13249] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 824.965167][T11833] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 825.079607][T13249] veth7: entered promiscuous mode [ 825.155300][T11833] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 825.164503][T11835] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 825.198426][T11833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.234543][T11833] usb 6-1: Product: syz [ 825.250721][T11833] usb 6-1: Manufacturer: syz [ 825.261200][T11833] usb 6-1: SerialNumber: syz [ 825.495053][T11835] usb 5-1: string descriptor 0 read error: -22 [ 825.502934][T11835] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 825.523129][T11835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.561170][T11833] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 825.587074][T11833] usb 6-1: USB disconnect, device number 14 [ 825.606881][T11835] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 825.815558][T11835] usb 5-1: USB disconnect, device number 8 19:26:01 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x0, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = dup3(r2, r3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x1000000000000010, 0x80802, 0x0) write(r7, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f5110800010002000000080002800100b0ed", 0x24) splice(r7, 0x0, r6, 0x0, 0x101ff, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket(0x1000000000000010, 0x80802, 0x0) write(r10, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f5110800010002000000080002800100b0ed", 0x24) socket$inet6_udplite(0xa, 0x2, 0x88) splice(r10, 0x0, r9, 0x0, 0x101ff, 0x0) r11 = fsmount(0xffffffffffffffff, 0x0, 0x41) r12 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7e0, 0x48400) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = socket(0x1000000000000010, 0x80802, 0x0) write(r14, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f5110800010002000000080002800100b0ed", 0x24) splice(r14, 0x0, r13, 0x0, 0x101ff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@map_fd={0x18, 0x9, 0x1, 0x0, r5}, @map_idx_val={0x18, 0xe, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, &(0x7f0000000240), 0x41000, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xb, 0x9d61, 0x2}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)=[r6, r8, 0x1, r9, r11, 0x1, r12, r13, 0x1]}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x25, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 19:26:01 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000080), 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{}, 0x0, 0x0, 0x0, 0x0, "7d4a83315813069e"}, 0x10}}, 0x0) 19:26:01 executing program 0: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x123541}, 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) 19:26:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000240)=0xffff, 0x4) 19:26:01 executing program 4: ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000006b40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000006b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0xe0, 0x9, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xfa}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1b}, @NFTA_SET_USERDATA={0x92, 0xd, 0x1, 0x0, "be36712bbdc9f024970c9ff0cbba193d1247cf107a2d151473f0ec5242dc832e5c4bb3f2cfe9be65b84b1f0087071d66d17477c80ff795c130d39cfa6a76acdbaabe6b189e4ab8dfdb132a846b924935da39826301282c32040ed4f40b28c93f42d5a7b9bb8b470b83ef2584435b45917bdb8fc4f8224db6ac51aa274c692ce6dd5954dca85001018154fab43b27"}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @reject={{0xb}, @void}}, @NFTA_SET_OBJ_TYPE={0x8}]}, @NFT_MSG_DELCHAIN={0x90, 0x5, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x74, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vxcan1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6_vti0\x00'}]}]}, @NFT_MSG_NEWSETELEM={0x1d18, 0xc, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1cec, 0x3, 0x0, 0x1, [{0x8cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x9c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x95, 0x1, "f312571587235a8fddabe85785019e86ff812208dd0908810f4efd79f38d0f48e5540f123b6b219af348e53ad1eb274126e49d11d4e4597ad7c67fd2389ffb5f6195ee64306409079ce4e9fa4663abfab788ee714737096f1387ee81ac5891b69013fea2ff9a58ac069c0f266fef80757da83be331e5e5a4f2843550697dbff87015f5a61de11470129672433bee38fd40"}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0xd1, 0x6, 0x1, 0x0, "7d10d1c6d64ef7aec54e2836762cefbb07db1ed444a8c71b56d52250c46043e50d859370913121c56bfad6d7491a96f067c7250c4916e189ee258e3231999ef9989832e84a60fb2e2c48996a7758ae2b184e91e2c32b7a13edf18e0c52f84608870c0124e3f559b878d29be54b918bfe42cabe455f037c176e5b3c45c9de69aa8e40587a09c6d27234e50a19e359c961226657e24ce64fb008bbd527232d04c45541e8c4c6b342383d7ecaf13926027cc86763dcf974009d5d15bc9740ce21a79332addc5fd65428f26301ab31"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x1c0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x65, 0x1, "fba93ebdea108aeaa170ecfe082476edc01b3e0291d136e2d937bdc942c4ee633aa22a27ccc0ba424269a91811362e182f8dc26dc21a709567a3ecf6e80ac3eb20dce44b77c0ca1ea740ce65f5e14bcfdb0bbd069cfa22ab9267430b4346ebb108"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8000}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x93, 0x1, "ba79a97710d929a346fe90c9be73710922a4218edccebef5e46478366bd041c3714c22b12d66c2363fea761ba6c489289a5df22a189814f7c4b255f19799be8ebfcfbfa0c00fc2b5c8426d3ffc1d57f944609d84202ea8a6afc29ac503b55f5e0bc84c21b3acb9db371ba5feb64e7f3523af483d7c7dd6336f9eabf37373472a025249d04af31c6840024cf0c5e17e"}]}, @NFTA_SET_ELEM_KEY={0x314, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf9, 0x1, "592318d2f98471c5a10e1a0b6971da48061f6066bac230b75cdc3fa79b732c5b673ffcf04d7891acbfee707a68ee824fa4b17ada95a1220212ad99a284a6937db67fb81836625c66dc522bdaca80fa068fbe77b707d16846c85cdf93224d8ab3a0c107c2fa649c9e715be32115197db7531a882f863ae884dbcbdd67bc768996ae9884949a9536276876d0c59385a8269cb6b536c27aea73c9ea189043bbaa4087d330635bcaf6bb04855dc57574cd18da48549945ef53e3d0868ef83425524a1ba5df1b18baf4ee9f5a6e31b9934720ae99ce282c4c1f26064eb284e39bb56ed86f407b3de270c6d96f0a3c381875d948c405aaa1"}, @NFTA_DATA_VALUE={0x69, 0x1, "64b1cfe3ef43d9d0a569745e587f6846560b352ac5bf18f91dc95f7d82a7aa142e1503418b1162a7516cca7fcc744dd9fd910791eca623338d9df0e4e6e143026c738caec65df9582f191a0cac7fc6e3e3b3e460c065297828b71e5dfa544c0c83f1c1ad6c"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x99, 0x1, "45b2f9da217dcfec6dc0cfbe191b5e38c295f7b9690146421c6cca3f5cefcbb8d73b0d7d4504889dc707187a44fcec0d89cb219092c45ece206e7c5b55b3bbffb5ab280069fc5ae05fb89b7b23e213da1951243b5f157c7b292d269df8c0561a6a0fec9d9941d834b574ba23852b8a7f33caa3d74062f1f2081e34fdcacacadf5ec338612f1930d5c6551b2df33d22eb6030c9eaca"}, @NFTA_DATA_VALUE={0xef, 0x1, "06cdd0f0c97578582892ac9e365464f06530a93f4260e1dc751c13bc49f2230c6c2fb38460196a5d8ff039b531d45f6bac75d99f8c3f77acb18d4efd320cb371ccaa3e83d83723fc997cc06b145fb57d5d39c8cdcd855db2fedf9bbafff2877cd6f8931b87f42ac54cb4e9e1e7344576c5b934b3646fdb541bdc332b698ef167623ccf9b1750f8f853204554721ce6edc446ebae4270df0c76c40e606830ea55a32de5bdf3cf8430bd2e042041ef3688fa13a9cd432f3be5108445c838471b2f2511d27a986eb3e65b62c78c4c41bcb2cfc495760b502c8ad611632cf0c5f83065640dffbae28e949a9345"}]}, @NFTA_SET_ELEM_KEY_END={0x270, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xc1, 0x1, "9ec44c3bf583c6862a3c814578788a0abbcab61e04f0499739113a90641c785ce4e1200fe5cd667862bea7f76ffd9cd255ed5c16ff6715288ecb819fc5d92f74d6c97d7dac0f07d9ef188467e43a3fba81c7b6319bca24eaa0b802738092acbc9ff56e2889b3f14c72a54bc3fc34c58f79b016b01a9aa07ea0d7af72b30a50323e084a5484594c72da87817fb7e89a418b8d5ab0a5bdfcc932a018fcfc3e13f52915078d543135f917da48406f0b3c2d656d505da80aa8b90bfc0ebe8f"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "ab32f25e7b7765688c78e73972142a7d7f08b536bb7a19f3fb2ade073a11504be5913af5012be65b4838ec4554a91710b7f0e7cc9f84554d2ddc120cd124685182bc25bcbfa5bd3f4f8947d56ce88c132dd61c2ff956fcfd11773f808faee53de7e50e834bd3efb17f159a3edcc407d84144918df2413ff8594db061aeee4a45f23bb8bdc027607a1717dc865b3525b98d96b11b278fa7d042fa6cd2bf2d53d36fdd3b0231de4d809f5b1f44ea0db7c14d2b7f34023e462eec918315d403b0b1286151d7271aa68e8771ca2357"}]}]}, {0x2e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1dc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xd4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x11, 0x1, "a7b11a20de145ab557f593e3a7"}, @NFTA_DATA_VALUE={0x1d, 0x1, "998f09e2a52b13d9a2cd180307f1f37abfc704435fc4d9d59d"}, @NFTA_DATA_VALUE={0xa5, 0x1, "c0b076500f74ce2fbce03064d89590dd92f98b69b6068961688a8c3522646536bf86e3a7c1d5e8292d3e325888217e9cd6516ff5657863ba93f5165d3aec7318644fd9f95d8bbe09dd0eb67893fa426cdadf5c1e4de3b86d7befaa0932ccab3d134ca216d5e53c6aa830519ac7675642f604bd04fd359e28f33787750b65cfff5744ba86759a1171f2e87cfd35df5e2be9cf960bfd18b73f7c9387d03ff5efcff7"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x61, 0x1, "710f5028fa721e1d5801da6e851027ba7069fd560883a8deb7fdfa35c1d8e8ba8d0ca1b6730952385cf5e5b3ce674e0190268d8eaa254fda4db4c3a1e536546fb4b11886c3942d6f9e7e9697d0173f9b0890e275338f85b2bb53c60604"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3ff}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x80000001}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0xb1, 0x6, 0x1, 0x0, "4fc7711c3484e9b98aa2e8131286d72aa896c478cd8276946bea3a1d833677825b64bce5e49a96207e8d4ddc550380dbbe3c2e39abdb4b7d8555420af3f83a54ae31b90c06ab7ed83d7676aa2195da43970301903aca2b3fe624191b05caecf3b85eefbac95d54976756304531d9305fde8002d1f0f524252baa23477fa9d902892c9eaf2b3b8c5506430abef0179f2087f377b2ecf89589b7cabda2fa420d775cc6420e94623ff86889215923"}, @NFTA_SET_ELEM_EXPRESSIONS={0x54, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TPROXY_REG_ADDR={0x8}, @NFTA_TPROXY_REG_ADDR={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_TPROXY_FAMILY={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}, {0x1134, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x111c, 0xb, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x104c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x103c, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x1024, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xff}]}, @NFTA_DATA_VALUE={0xfd8, 0x1, "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"}, @NFTA_DATA_VALUE={0x3c, 0x1, "ae731f086a754ffe05f9e32536961a0706243c76140adf02607e7a3dc14b08ffba3e9114bc80b8a2525c4f6f6b7dc056bf26dde9f00098ed"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x4}]}]}}}, {0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}]}, @NFT_MSG_NEWSETELEM={0x14}], {0x14}}, 0x1ec4}}, 0x20001004) 19:26:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGETSGCNT(r0, 0x8903, &(0x7f0000000100)={@remote, @private}) 19:26:01 executing program 2: syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), 0xffffffffffffffff) 19:26:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000037c0)={&(0x7f0000002840)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xfb}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @NL80211_ATTR_CSA_IES={0xe80, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x275, 0xf, [@fast_bss_trans={0x37, 0xb4, {0x0, 0x5, "91a46706befa6d95d4a762d5c0bb2a24", "c96261629bd4e6bfd4e20aaef4e8224878625b0cd29433b11b41a1ab1205ce9d", "3a92fc1713e4449faa480b8ba06bd346456447fc3b910d71fddb34c15547e13e", [{0x0, 0x21, "f4b1ead6d5288b794925a1dfae3dc3a775015cc03d9e42e4def5d6f23277e1b146"}, {0x0, 0x2, "1e60"}, {0x0, 0x19, "2b364c269f9f63d3a282a20e518a4b29c20947e77bd95bf6a6"}, {0x0, 0x1, "e8"}, {0x0, 0x1b, "476b9a210e300dc42b15e758ae2bd091534c95d266ed8ec37c6327"}]}}, @erp={0x2a, 0x1}, @rann={0x7e, 0x15, {{}, 0x0, 0x0, @broadcast}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x0, 0x0, 0x5}}, @random={0x0, 0xf7, "899682cf18c192852bb2f29f1ef2257e9f00a45394027f50eda330c62b306c9c50449c7e088cab26754780b81d0fcc068f752dfc22ce8ba72f2ec5d1b7c9de3c5eb3adba9bffae2021aacd9ab626a9c287db9d2aa6a3620134dd6e9be5a68ff8be8a2bd1e30e5518282d5f5ff5b77a46b949b5aee55c9669cc4490555da70b145c5136c96893bda036efa93d8fd8386fc70be749b070a1fdb4f6749610440db65e0b4e9807685e4e3a4ba378671986fd03f708cf8432afd2b7ac753fec638bc1fd769384e43e3aba0ff0f34c3efaaf60679e4a140ed6344787b2c182abe640bccbd6d724202e5ab91a378de2de4d42ed2fcb1085c4258e"}, @mic={0x8c, 0x18, {0x0, "420887dfcb48", @long="4e412381bb71f67d9d2a01947d9392be"}}, @mesh_id={0x72, 0x6}, @ssid={0x0, 0x6, @default_ibss_ssid}, @fast_bss_trans={0x37, 0x76, {0x0, 0x1, "939cebeb96c1817712486bee0dc1492d", "1a7bfb78987674842a987ac36176edf86b894e64824b44e2b3e8b21dc2e07ffb", "93673d967ae9a7667bdaaa2df3178cd3f34b8118c54c084f5fa59003ff94a3d8", [{0x0, 0x22, "d97bfe86ba5220f8abcac553fb3f78d3883366ca6ae6a9bd2db4b75bbbc049e617ea"}]}}]}, @NL80211_ATTR_BEACON_TAIL={0x195, 0xf, [@prep={0x83, 0x1f, @not_ext={{}, 0x0, 0x0, @device_b, 0x0, "", 0x0, 0x0, @device_b}}, @peer_mgmt={0x75, 0x14, {0x1, 0x0, @void, @void, @val="d34bfeec0d66cc5f49cbdb056993f27f"}}, @mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0x4}}, @measure_req={0x26, 0xde, {0x0, 0x0, 0x0, "57d994225fbbfee649d4dedc722e0c0976894f0af53a0a63d43bc639bebb4726c824426b00e0a542589ab546d4de75f51fd0339a0cd668df9ba5bde1d3a4796555afe6fb4016cad74b974105da999068d16f72540dc3ebc14fd017c3a0d0052419060bb079ec77629a572975a3593be56effda94ab78e574a60c138aaedc28524684d463d016b98f992fe4ccbd792763541a3e356d5cc29f81d9d08d81924d36a256347f73b777491c24175104c7da1cd29ed6e44393e0c027341811941904aa0d0c458ad7bcc1131a04895e279e9252103679c598329a3838b1df"}}, @peer_mgmt={0x75, 0x16, {0x0, 0x0, @val, @void, @val="9cf78cd8ec280682250e896f7ac24337"}}, @mesh_chsw={0x76, 0x6}, @measure_req={0x26, 0x48, {0x0, 0x0, 0x0, "865d674af2e0abee1573d938941502f6b191c6b13837d7fc5d2e377c630a4efe96fabb404e3e04b099962addf0c53051e94882babffcd1ac0b7d10a4c3ba4b019cb17d8035"}}]}, @NL80211_ATTR_BEACON_TAIL={0x2f, 0xf, [@link_id={0x65, 0x12}, @rann={0x7e, 0x15, {{}, 0x0, 0x0, @broadcast}}]}, @NL80211_ATTR_FTM_RESPONDER={0x224, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x25, 0x3, "0aa1dafe93508b812c3dcb4aa1aa968f1f39fbbc4b775f84eb54ca39fa42327782"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x89, 0x3, "14a9d07af73cf6286964978882852f2d31d6c034e4150f7ea013ad32b662d0d482675aa80a9c652734844ae1dd07965fc207d90a9db7719add686f5fd1004ea6837feb36008805ba84cfc706b4dd8da4fd7dad02fc5a9fbcf9a1c466c9876fc8a5cadcfa4fe7b6e632a4e7f2cf9cc5103d868cc58cb421e5a5d72b1c1bfb4c244d8578729c"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xd5, 0x2, "b7cf600be11425df1c7d60dae6dd8cdb42a2f5e30503597d8b57f4df3ffc3d504ac03700d886e3cca90281a89109b74b79b4ab4f3dd86ac9f5a91ae57cb5e316eb0aa4923b4f2d51e17a81c609bd61ca4fa2ed8b71f02c175ff61a8f0b352c4c856a289fb2cb6f282e0a10fbc111b242ccd8edb430bc9bfd9804dd32ae08ed795efc89892dcac09917fb39fd794956ee1239abf02c513fe99275494291fbb7806b3d24a1103440cad4b899c8aa79c69037313b4ac4ab14e234f8049b87de345e1fb0cf52e4b8f6313eb8097aa170d3a6fd"}, @NL80211_FTM_RESP_ATTR_LCI={0x85, 0x2, "e7ad667efca191f3e37c74f63f56ac672b290bced89b6493674321a9a997d5d6e06dd5716542243c359c512639a32ce94c84fb915eaabc71b64ecf6a5068718d290f5e0cc9fb516514d6b8f7dab794202fc48fccdc9d2b75ccaeca85fe6f809f0cf84085582a9fe2296a7adba02721ec83b4a5eb918733f4baaec5ef93d700aad1"}]}, @NL80211_ATTR_PROBE_RESP={0x815, 0x91, "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"}]]}]}, 0xec4}}, 0x0) 19:26:01 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000056c0)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x0) [ 827.357098][T13269] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:26:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002200), r0) syz_genetlink_get_family_id$tipc(&(0x7f0000002280), r0) 19:26:02 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x0, @vifc_lcl_addr, @multicast1}, 0x10) [ 827.587298][T13269] veth9: entered promiscuous mode [ 827.710597][T13289] dvmrp1: entered allmulticast mode 19:26:02 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x0, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:02 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 19:26:02 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) write$tcp_mem(r0, 0x0, 0x0) 19:26:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000018c0)=ANY=[], 0xd0}, 0x0) 19:26:02 executing program 3: timer_create(0x2, &(0x7f0000000000)={0x0, 0x15, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) 19:26:02 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x0, @vifc_lcl_addr, @multicast1}, 0x10) 19:26:02 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)={0x0, 0x1, [{}]}) 19:26:02 executing program 5: openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x200, 0x0) 19:26:02 executing program 2: memfd_create(&(0x7f0000000240)='%)\x00', 0x4) 19:26:02 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x0, @vifc_lcl_addr, @multicast1}, 0x10) 19:26:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@remote, @ipv4={'\x00', '\xff\xff', @empty}, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000010}) 19:26:03 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x4) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}, 0x8810) 19:26:03 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:03 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000031c0)={0x2020}, 0x2020) 19:26:03 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x0, @vifc_lcl_addr, @multicast1}, 0x10) 19:26:03 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x9be0b8b8ee1588cf, 0x0) 19:26:03 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x2982c0, 0x0) 19:26:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000028c0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @remote}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000300)="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", 0xb49}], 0x1}}], 0x1, 0x0) 19:26:03 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0}, 0x0) 19:26:03 executing program 4: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000002a80)={&(0x7f00000024c0)={0xa, 0x4e21, 0x0, @local, 0x100}, 0x1c, &(0x7f0000002780)=[{0x0}], 0x1, &(0x7f00000027c0)=[@hopopts_2292={{0x18}}], 0x18}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000002c40)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002b00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 19:26:03 executing program 2: add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc4}, &(0x7f00000003c0)={0x0, "ff4d1de3f9cabda1a6ffcaa9e45ab495daae666e68d713a68cafa5764ddd634fbc8164c6326d9c4bb4427028f1ed494d424543de53e374d7368d59c64c953a88"}, 0x48, 0xffffffffffffffff) 19:26:03 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x30, 0x0, 0x0) 19:26:03 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 19:26:04 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001840)={&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @remote, 0x6}, 0x1c, 0x0}, 0x0) 19:26:04 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:04 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x0) 19:26:04 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002a80)={&(0x7f00000024c0)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0}, 0x0) 19:26:04 executing program 4: pipe2(&(0x7f0000000000), 0x0) lstat(0x0, 0x0) 19:26:04 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f0000000100)) 19:26:04 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x4) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}, 0x0) 19:26:04 executing program 2: memfd_create(&(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x2) 19:26:04 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'sit0\x00', 0x0}) 19:26:04 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8915, &(0x7f0000000100)={'batadv_slave_1\x00'}) 19:26:04 executing program 3: io_setup(0x81, &(0x7f0000000380)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0) 19:26:04 executing program 5: pipe(&(0x7f0000000000)) io_setup(0x0, &(0x7f0000000000)) 19:26:04 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) 19:26:05 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:05 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x5452, &(0x7f0000000040)=0x1d) 19:26:05 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002a80)={&(0x7f00000024c0)={0xa, 0x4e21, 0x0, @local}, 0x1c, &(0x7f0000002780)=[{0x0}, {&(0x7f00000026c0)="94", 0x1}], 0x2, &(0x7f00000027c0)=[@hopopts_2292={{0x18}}], 0x18}, 0x0) 19:26:05 executing program 0: pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) inotify_rm_watch(r0, 0x0) 19:26:05 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890d, 0x0) 19:26:05 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0xfffffffffffffffc, 0x0) 19:26:05 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000004200), 0x1c3402, 0x0) 19:26:05 executing program 3: syz_emit_ethernet(0x15, &(0x7f0000000040)={@empty, @local, @val={@void, {0x8100, 0x0, 0x1}}, {@mpls_mc={0x8848, {[], @llc={@llc={0x0, 0x0, "ec"}}}}}}, 0x0) 19:26:05 executing program 5: pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) mount$fuseblk(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 19:26:05 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000180), 0x4) 19:26:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 19:26:05 executing program 3: chroot(&(0x7f00000000c0)='./file0\x00') openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) open_tree(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0xe, 0x4, 0x520, 0xffffffff, 0x368, 0x160, 0x0, 0xffffffff, 0xffffffff, 0x450, 0x450, 0x450, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x8, 0x5, 0x9, 0xb342, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [0x0, 0xff000000, 0xff], [], [0xff000000, 0xffffff00], 0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x2, [0x8d3, 0x80000000], 0xfffffffe, 0x0, 0x0, [@local, @dev, @private0, @empty, @local, @local, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, @private0, @mcast1, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast1, @remote, @private1]}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0xd4}}}, {{@ipv6={@rand_addr=' \x01\x00', @loopback, [], [], 'nicvf0\x00', 'pim6reg0\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "ee2a7f11c102627423123e987e7bd75b42312a049b4629f04d1b11471c9c"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) openat$bsg(0xffffffffffffff9c, &(0x7f0000000dc0), 0x40, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000e40)=@filename='./file0\x00', 0x0, 0x0) [ 831.581903][T13402] x_tables: duplicate underflow at hook 2 19:26:06 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x0, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:06 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5452, 0x0) 19:26:06 executing program 2: socket(0x3f, 0x0, 0x0) 19:26:06 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af60, &(0x7f0000000040)=0x1d) 19:26:06 executing program 5: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000080)) 19:26:06 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0xc0189436, &(0x7f0000000100)) 19:26:06 executing program 5: clock_gettime(0x0, &(0x7f00000000c0)={0x0}) pselect6(0x40, &(0x7f0000000000)={0x3ff, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000080)={0xee79, 0x0, 0x3ff, 0x1, 0x9, 0x10000, 0x4, 0x2}, &(0x7f0000000100)={r0}, &(0x7f0000000180)={&(0x7f0000000140)={[0x1]}, 0x8}) clock_gettime(0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f00000001c0)={0xbbe1, 0xa9, 0x200, 0x0, 0x3, 0xbea6, 0x0, 0xfff}, 0x0, &(0x7f0000000240)={0xfffffffffffff73c, 0x0, 0x0, 0x8, 0x4, 0x4, 0x2c42dd35, 0x8}, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={[0x8]}, 0x8}) io_setup(0x81, &(0x7f0000000380)=0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) io_pgetevents(r1, 0x5, 0x5, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], &(0x7f00000004c0)={0x0, r2+10000000}, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_dev$vcsa(&(0x7f0000000500), 0x0, 0x4001) io_setup(0x0, &(0x7f0000000680)) socket$inet6_udplite(0xa, 0x2, 0x88) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000fc0), 0x6b91, 0x0) syz_clone(0x200000, &(0x7f0000001000), 0x0, 0x0, &(0x7f00000010c0), &(0x7f0000001100)="2a306d73ec74e81d8cf1e514d8837ca887c2a7d0bf8687599ac81cc8a2af91ceffb2f57224b034b27cc13aeef22847f94ce4514a155f5f8f4566307c9b0a4a31d0549b2725bef398546ce118259f510b28128249d0de9c9ebe5f0e1b86d2e3dccc45b34d9f51bc60e4bd0c484c2133c2e8e19cb1dd6e23847aa082f2daa5f9ecfd3b118ac40d2e905f9e20da9460f91d1c383bb1fdd0e0ecc2058d12ca26558b03c463634a5115421eb147830e528985e6cc45726d5f2cad7ba90a2d5b777a9dec40be0eb96eeeb4aea567bec25a24d40085b4d025b5c1ce334445c625b741fac3668d5cda3cc3078ad15ba0d70d17fb08260c8fd879584490bf5cce1ab91fae111c3dbabc5d47efb351d74e073866c90b0a1d1c09a0129fa4450362eeba937d42504e2a9c6df4272ebd4a06a50e336287173fa6d37d7a2ecfc491ff7987e039777da4c1036aa996edc63c37709b0a369ceb65679e827fc994a69b98361f01431f8342d7ee82e4adb3a9e8ee2ec093f03e5ce4ac5d0f0845306cb910d5d0337ff23b821d5b7c287d8b4a75355ff2863057b3f9b566c7750092ffcbaf5dabd3e299285691fe6c52de340f07c40f594d603128cee8521359c805ed756b3fc40372d8dcfe08a6c08a28a3364c6018f2d109693b53ab5dfc5baa791cbe0517ce31e4daf8e73b03bfacc2dec66a8f8cc9261329f2ee9e60dc5c0d0eacea07a1fb51794942045c63c54b2a83e2bd55190ff089ce8217a8d3e0d56918edee3d311fe2bb2ce246b51694578c50757fccec4e896515bd835f868b3dadd4dce0c3d5d8780b32b9690a896d71bfe6811a7b713e0501970f14ae783acdf81c702ea4e9d68134660a5e52db879f0bba79ba731bb3c78805c653015e76dc7e76cf718b9dbf8f93a234ce085d92c185066a5bac381dca80634485977cba0c6ee4bcc71040aa235685f2da1f735a60c96c7418f14faeb7fbf41c71266f9a0a113e422b8d97f33519a6e5756d390e743d861136c18d7386ec53758ddb77ca4404c82528270611decf457ac617b98c8cbb4999f7526510eb4d1c15a9e50be4ab6ec86cd835b6e25529d88d5639f0761e7abf562ff9592a8137458fb471bc8f72c6d48d1018cd93adddc98c91d016c195840f80abb19855f4e341e0b36c6bd7628bd1963ca5842e494dcba31a5e9c4a93c77f2f7cb8d0edd381313e484183e1b2027e4250343491ed161dd5cad00cbf2a8049f4bf36dd4f9f8c3f842668f2ee274450bddca92eaf300ad853f1f06f529e0a3cc0d61799d12117abe2daa286d7c0904a976ad534195741fe070588022651fa3420f337ab4ae0bf41ea5979a1f323f46f070d4f1150f2d77e37f460a95347bdba2631594e2be474768a92d37c4254a4aa40210c91c1f27927d692e958a048d04e3d5a88198c4135823e302cde2e8c1fba154954fe38f2857673a7a8515ec3df7ed030e88e03438652a776a84d493f246834c16fbd5d9d5a1343975b3146b815fd21ee280a9f9d16181d38eecd726c0ea0cd86c37fc93acedc281bb62b179a41513c25c86eab427340ba427a3af857a17369371db421661dc3369bac06cf0c35e43b976944251bbb99357d9db0e229436d3731f055bf0bcb6f863a3cfc497a78b9d08ac9f8b81446c75cb3777cac0072e71d83abef12dd53d014ec630ff797a6126413dc13391bef5112b67dc3cf1e6d6b63c5dc0d2d7f47c9a03d340141ffdd6e2a7b2802d9d9f79ed23953d786d2be8d2cb1cf19ddbe87a84493ef653ec85a0f05ec5a295b4156bdac6e0fa4650e2d8c164e9b333ce3c6275d5ea4873ef8f893d2069902b634e7a2e89a16425c6f0122aa5ec8dcc41de96bc814afb7c187c5369ef54fe3444af0cfa11f0f26764a813a2549f539e96ee391df34f17a5a2db5a89720ebd36b1657e4860d279bd78562ad2a71dbabc3d41a0196f332f1597217f7a36390483559abac78a7573c7995e1c3f55465fdf102e4482a05945f466639c319e8c94649a34cac22f2a5145fd44c0ef5750ff74205e0e9e1ba4fc10f747fa263d55498c3930e9219567045c1fa16e96398486d015038c41be3c33ded5068612b99a22cadbabecbf0082f2329854f9b4bd4aad832e3b14b8fc3a8a575900e7e63434ba13bf4696983e719c725cf12f27ada2074809d405ec3357035f560434e7f4df9e514fc25b180d7ff97aa336700a02217e9f48eb31e9748436a8a1a2a275404acf3c0399374fd9b91f20b66310557aa8710d5bd71c7628b78af6f4799be95ae62827b1ef122c10c131f067ae8caf1ec1f24c6f08cca8c2e5f865eb70432de1200dfee4a27c1773f407c307ddb4bb91320eee58f6def44d3d99ef48e9203b11e5e049b081b018019d307cb54070649dc689380187f74c8d91ebdaea1268834bee4ba39b6459a2b5cf44719b1e7e9d9818976fee056452dc65d3f52f6de5280cddd6d88bce96e42b994a56730bda0931bef6237792a45052c05799da13f202514cd62ec79aa0dff073f55a6e8782b020e335d7e8fc57e55e7f6115ecce2770556ee5a8f70ee521541f8405463cca6135c5a27655bc6c5eeb5d8409687a1917cc924f1c3ec2c8657ea20ca3d48a756d9241d89b147e2d807ed01d0bb667637f2b2d4e3522b7b1e35712fdebe9cd3af0c30e19f6541464e8065935217ff0dbbd18befd558ae937464a371bbf55fd9ae90a6eec5fcd8b5efd627f60203f6b3794108f66538d65f0f0f53fa50e975c9b84ca75747737e9afa3671942e3481fc9f2735b0d3a9d8fd0582ef74f542114e50fa1069a78f53b8dc8d5d4e4eba31a88b4c6ac9bfcfaa8dceed8502d6d534bad4a6e6cbce706d051474d718da0ca0f4d7895d62390583254d37ab40644deab03595340b0f68cc628cc84ec94fc9268adb0157a7f6f18d21ded4c52db70b75b545104ec3f0aac8340a35d87ee590bdc5f73fb58808e22327b6cd1dd801c6e623ec6626a257d47438bc490090955b4cc70a9a25c5587e1bb065bf21b4269fce58f01213265580928a3e53a6a7253e01ea52fd0616f59c8bf2c7257ffd3d857f00aedde975e4630ccc2abda80dfbd620872eb23c9aaefe8f4cb38b671a016835fb0b23c919cc23aa9dc19a8702699882345e67af29d26664a15b0649919ba81d4bee8b465976c436a28933e275d3ac47432d62faef58f1b6152f1bceda7ecb957c619f6d58af4f3c9ad2a2c623f76567376cf204ea66d78b6f852e47dee42e14a73db3f2f0e35284f8ed275568ef057472e4f379ee45c6ad678de9bd96e300b10f635c8bcea6d747d24fa5320480aeeac73613edbb4cad943677c3c97ee6164e5e58122e17c0810c682ce3d39776a20507480133898ed07e8237c48956367dd378ca19cd8344e7439a054db53313f381455e46016db5c56fe59f804be6fb880aa7fdaf582e7b516350e17dfec093c527117c7801da38d090922414dd734b447d766152d0c64bf6e06854a08c37d568de6deebdf8ac6cf89ec9d333ca66c0056b32418f484e8f14adb321c1999ba99ab5d81d797b1cb22457ab072ca49e6b3286f5d4d451c0ec30a7a6eb5711d0dd747f0fbe6a95d39185ae4c") 19:26:06 executing program 2: io_setup(0x101, &(0x7f0000000000)=0x0) io_submit(r0, 0xfffffcf0, 0x0) 19:26:06 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8906, 0x0) 19:26:06 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5411, 0x0) 19:26:06 executing program 3: r0 = gettid() process_vm_readv(r0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/100, 0x64}], 0x1, &(0x7f0000000a80)=[{&(0x7f0000000600)=""/104, 0x68}], 0x1, 0x0) 19:26:06 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0xc0189436, 0x0) 19:26:07 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x0, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:07 executing program 3: pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x10, r0, 0x0) 19:26:07 executing program 4: syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 19:26:07 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0}, 0x0) 19:26:07 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) 19:26:07 executing program 0: pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8000000000000001}}]}}) 19:26:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x7fec}]}, 0x24}}, 0x0) 19:26:07 executing program 3: r0 = gettid() process_vm_readv(r0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/94, 0x5e}, {&(0x7f00000001c0)=""/111, 0x6f}, {&(0x7f0000000280)=""/49, 0x31}, {&(0x7f00000002c0)=""/230, 0xe6}, {&(0x7f00000003c0)=""/41, 0x29}], 0x5, &(0x7f0000000a80)=[{&(0x7f0000000600)=""/104, 0x68}, {&(0x7f0000000700)=""/115, 0x73}, {&(0x7f0000000780)=""/158, 0x9e}, {&(0x7f0000000880)=""/106, 0x6a}, {0x0}, {&(0x7f0000000940)=""/94, 0x5e}, {0x0}], 0x7, 0x0) 19:26:07 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, 0x0, &(0x7f0000000700)) 19:26:07 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x1cd001, 0x0) 19:26:07 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) renameat2(r0, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x5) 19:26:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000780)={&(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000180)='$', 0x1}], 0x1}, 0x0) 19:26:08 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x0, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:08 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x4b47, 0x0) 19:26:08 executing program 5: quotactl$Q_GETFMT(0x0, &(0x7f00000033c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 19:26:08 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x4}) 19:26:08 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a40), 0x50000, 0x0) 19:26:08 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8913, &(0x7f0000000100)={'batadv_slave_1\x00'}) 19:26:08 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 19:26:08 executing program 3: setitimer(0x0, &(0x7f0000000100)={{}, {0x0, 0x1}}, &(0x7f00000000c0)) 19:26:08 executing program 4: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@broadcast, @empty, @val, {@ipv6}}, 0x0) 19:26:08 executing program 2: syz_emit_ethernet(0x14, &(0x7f0000000000)={@empty, @local, @val, {@generic={0x88f5, "61e5"}}}, 0x0) 19:26:08 executing program 5: setitimer(0x0, &(0x7f0000000100)={{0xffff8001}, {0x1c}}, 0x0) 19:26:08 executing program 3: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) unlinkat(r0, &(0x7f0000000180)='./file0\x00', 0x0) 19:26:09 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x0, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:09 executing program 5: mlock(&(0x7f0000fea000/0x14000)=nil, 0x14000) munmap(&(0x7f0000fee000/0x10000)=nil, 0x10000) 19:26:09 executing program 0: msgget(0x0, 0x202) 19:26:09 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x9, 0x0, &(0x7f0000000080)) 19:26:09 executing program 2: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) rename(&(0x7f0000000100)='./file0\x00', 0x0) 19:26:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 19:26:09 executing program 0: mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x4) 19:26:09 executing program 3: mkdir(&(0x7f0000000280)='./file0\x00', 0x1ba) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f00000004c0)='./file1\x00', r0, &(0x7f0000000540)='./file1\x00') 19:26:09 executing program 4: unlink(0x0) execve(&(0x7f00000015c0)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000001940)='./file0\x00', 0x0, 0x0) 19:26:09 executing program 2: utimes(0x0, &(0x7f0000000840)) 19:26:09 executing program 5: mlock(&(0x7f0000fea000/0x14000)=nil, 0x14000) munmap(&(0x7f0000fee000/0x10000)=nil, 0x10000) 19:26:09 executing program 0: mlock(&(0x7f0000fea000/0x14000)=nil, 0x14000) munmap(&(0x7f0000fee000/0x10000)=nil, 0x10000) [ 835.422941][T13510] process 'syz-executor.4' launched './file0' with NULL argv: empty string added 19:26:10 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000040)) 19:26:10 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000001980)) 19:26:10 executing program 2: setitimer(0x0, &(0x7f0000000040)={{0x0, 0xffffffffffffff81}}, 0x0) 19:26:10 executing program 5: mlock(&(0x7f0000fea000/0x14000)=nil, 0x14000) munmap(&(0x7f0000fee000/0x10000)=nil, 0x10000) 19:26:10 executing program 0: mlock(&(0x7f0000fea000/0x14000)=nil, 0x14000) munmap(&(0x7f0000fee000/0x10000)=nil, 0x10000) 19:26:10 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x0, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:10 executing program 5: mlock(&(0x7f0000fea000/0x14000)=nil, 0x14000) munmap(&(0x7f0000fee000/0x10000)=nil, 0x10000) 19:26:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x200, 0x0, 0x0) 19:26:10 executing program 4: socket$inet6(0x18, 0x3, 0x6) 19:26:10 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) r1 = dup2(r0, r0) getdents(r1, 0x0, 0x0) 19:26:10 executing program 0: mlock(&(0x7f0000fea000/0x14000)=nil, 0x14000) munmap(&(0x7f0000fee000/0x10000)=nil, 0x10000) 19:26:10 executing program 2: syz_emit_ethernet(0x22, &(0x7f00000000c0)={@local, @random="6a1cace9e5d4", @val, {@ipv4}}, 0x0) 19:26:10 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @empty, @val, {@ipv6}}, 0x0) 19:26:10 executing program 4: semop(0x0, &(0x7f0000000000)=[{0x0, 0x5}, {0x3, 0x4000}, {0x1, 0x1ff, 0x1000}], 0x3) semget(0x3, 0x4, 0x80) semctl$GETPID(0x0, 0x2, 0x4, &(0x7f0000000040)=""/246) r0 = semget$private(0x0, 0x3, 0x50) semctl$GETVAL(r0, 0x2, 0x5, &(0x7f0000000140)=""/151) 19:26:11 executing program 2: syz_emit_ethernet(0xe, &(0x7f0000000040)={@local, @broadcast}, 0x0) 19:26:11 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@raw=[@func, @func, @kfunc], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:26:11 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x400}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000b80), 0x0) 19:26:13 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x0, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:13 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs2/custom1\x00', 0x0, 0x0) 19:26:13 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=@base={0xa, 0x9bfd, 0x7, 0x10, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x5, 0x1}, 0x48) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) 19:26:13 executing program 2: pselect6(0x40, &(0x7f0000000580), 0x0, 0x0, &(0x7f0000000640), 0x0) 19:26:13 executing program 5: pselect6(0x40, &(0x7f0000000580), &(0x7f00000005c0)={0x5}, 0x0, 0x0, 0x0) 19:26:13 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x18, 0x2, &(0x7f0000000e40)=@raw=[@btf_id], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:26:13 executing program 3: pipe2$9p(&(0x7f00000013c0), 0x0) 19:26:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001580)=@base={0xa, 0x0, 0x0, 0x10, 0x0, 0x1}, 0x48) 19:26:13 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) 19:26:13 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:26:13 executing program 0: pipe2$watch_queue(0x0, 0x80) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001380), 0x4) pipe2$9p(0x0, 0x80000) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f00000014c0)) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=@base={0xa, 0x9bfd, 0x7, 0x10, 0x0, 0x1, 0x3}, 0x48) 19:26:13 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff}) 19:26:14 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) getdents(r0, 0x0, 0x0) 19:26:14 executing program 0: syz_emit_ethernet(0x62, &(0x7f0000000000)={@broadcast, @local, @val, {@ipv4}}, 0x0) 19:26:14 executing program 5: open(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000180)) 19:26:14 executing program 2: syz_emit_ethernet(0xe, &(0x7f0000000140)={@random="c383041d00", @random="577d9d3600", @val, {@generic={0x8847}}}, 0x0) 19:26:14 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@random="c383539054eb", @random="8010209000", @val, {@ipv4}}, 0x0) 19:26:14 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:14 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff}) accept4(r0, 0x0, 0x0, 0x0) 19:26:14 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, 0x0) 19:26:14 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) 19:26:14 executing program 4: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001380)='cgroup.procs\x00', 0x2, 0x0) 19:26:14 executing program 0: accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x1400) 19:26:14 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) 19:26:15 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:15 executing program 3: getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/209, 0xd1) 19:26:15 executing program 0: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 19:26:15 executing program 2: select(0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0x2710}) 19:26:15 executing program 4: msgget$private(0x0, 0x50) 19:26:15 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, 0x0, 0x0) 19:26:15 executing program 5: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$packet(r0, 0x0, 0x0) 19:26:15 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(r0, 0x5450, 0x0) 19:26:15 executing program 3: mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0) 19:26:15 executing program 0: r0 = socket$inet(0x2, 0x3, 0x0) sendmsg(r0, &(0x7f00000018c0)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, &(0x7f00000013c0)=[{&(0x7f0000000080)="4aff17934f5ab1260c41b1c678fded6af865da0221518e090cce9ec8ef5a0f0c38a57db8c93f3a3724d4c8321915640165df3621e637984182c21e564af8cd6e7cf524e34d71d0bd962a9861394c622ea5c3653aedbc8280ad402d85f0aab061e093419a2d685f8090dd6accb359115620b5e2caee3edb0d66329e1def2188015a74e0", 0x83}, {&(0x7f0000000140)="6d21fded7b78bedb8fd18a16330133ffd5b72b4aec9ec1aa210182bb5a82e03de06bd4a48bd82a", 0x27}, {&(0x7f0000000180)="81d300364e4ff3918d4a92ff8f7b7aa232727e6f0aa25d4a062be3291f6174d57dfdc4b0f4f14625be3c0638e9101e0c0af1068808fa93c582a82f5cdf841a62c55f8a1594d976d2d2ada52e0552089b6cade424da7a19e116e4911a01e238b64ede8e61bbc7d9a4dcac2f23e83be02749", 0x71}, {&(0x7f0000000200)="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", 0xe9a}], 0x4}, 0x0) 19:26:15 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000180)=0xb) 19:26:15 executing program 4: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000), 0x4) 19:26:16 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:16 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000000)={0x82}, 0xb) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000180)=0xb) 19:26:16 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f00000001c0)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 19:26:16 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) 19:26:16 executing program 2: open$dir(&(0x7f00000003c0)='./file0\x00', 0x40000400002002c6, 0x0) 19:26:16 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockname$inet(r0, 0x0, &(0x7f0000000100)) 19:26:16 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f00000001c0)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 19:26:16 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x105) 19:26:16 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x1, 0x0, &(0x7f0000000080)) 19:26:16 executing program 5: munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0x0) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 19:26:16 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x81010, 0xffffffffffffffff, 0x0) 19:26:16 executing program 5: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000000)=0x1, 0x4) 19:26:17 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x0, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000140), 0x80, 0x0, 0x0, &(0x7f0000000300)=""/225, 0xe1}, 0x0) 19:26:17 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) sendmsg$inet_sctp(r2, &(0x7f0000000580)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@dstaddrv6={0x1c, 0x84, 0xa, @empty}, @prinfo={0x14}], 0x30}, 0x0) 19:26:17 executing program 4: symlinkat(&(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00') 19:26:17 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r0, &(0x7f0000001900)=@un=@abs={0x8}, 0x8) 19:26:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x8, r0) 19:26:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x46, &(0x7f0000000000)={@multicast2}, 0xc) 19:26:17 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$unix(r1, &(0x7f0000000400)={&(0x7f00000002c0)=@abs={0x8, 0x1}, 0x8, 0x0}, 0x0) 19:26:17 executing program 0: setitimer(0x2, &(0x7f0000000080)={{0x0, 0x271}, {0x5}}, 0x0) 19:26:17 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)) 19:26:17 executing program 2: clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000001c0)={0x0, r0+10000000}, &(0x7f0000000240)={&(0x7f0000000200)={[0x8]}, 0x8}) 19:26:17 executing program 4: bpf$MAP_CREATE(0xf, &(0x7f0000007480)=@bloom_filter, 0x48) 19:26:18 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0"], 0x24) 19:26:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x8003, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) bpf$MAP_UPDATE_ELEM(0x3, &(0x7f0000000100)={r3, &(0x7f0000000140), 0x0}, 0x20) 19:26:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000001480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001440)={&(0x7f0000002800)=ANY=[@ANYBLOB="c8130000", @ANYRES8, @ANYBLOB="0001"], 0x13c8}}, 0x0) 19:26:18 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x0, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000240), &(0x7f00000002c0)=0x4) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000025bd7000fbdbdf257900000008200300", @ANYRES32=r3, @ANYBLOB="0c00990007000000400000000400f4000400f400"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x44000) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20000800, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) 19:26:18 executing program 3: bpf$MAP_CREATE(0x9, &(0x7f0000007480)=@bloom_filter, 0x48) 19:26:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @local, {[@end]}}}}}) 19:26:18 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19:26:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000001900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000018c0)={&(0x7f0000002800)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xe0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5, 0x5, 'n'}, @ETHTOOL_A_BITSET_MASK={0xcd, 0x5, "dffff401e81139bc5b71fdf1b0c328c46231a683f81c89d88df2d7de3ee026ee7bae477106a629905a05b7854978ccc41fcf0508c67b12f3bc861cbfba11d1eedb49d193746c2886b6890acc4ae0d7f87b735e9b4aef985c56c861940066dfbe36f37f331b44bc60931b570ebcd598a85edfc64d5b813a798467d788db84748c4cce5899cd7879d88bb525224c0c074a5ee463c522860599acbe53d1962fef4c49f7a44ab5eada23e33ff87d2b397e5a424da53c26310776fbc3b9ebb202fff4b69180d2eb7041f69f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x118, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd5, 0x4, "a63e848ddc7005c12fa8e7e6eacc25249778042f292be2961ccdea7d8dae688ed637efc5c4e659d9a4657b4e9f69d832f42c1cba34dacd0d2145cd626868689befe748499c098f39269f3fae7a8786e90888d9cf333d538197e199f46a6f6406200cb7067a3ac1193ed15c27f4b04874e7c29d675e5f76109a74dab3695bd3863390eb94883fa93de6c500633e5c431a88e3002464dfddd3cd53d489f39ba53c6617509939f228ada824a17e7c46867c0c29f671b2c569ff68c53b338b346a86686e8bb1cdeac848498b2bfd0aca8e7996"}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x8b*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_MASK={0x19, 0x5, "95afd33282dd9cb6b272e44cebf5f1c1e289b3efe7"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x214, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x5, 0x4, "1e"}, @ETHTOOL_A_BITSET_MASK={0xa1, 0x5, "22a6a159dfd3eccefd83e3571e2a6419160a4d51895d96cffbb0df5dcd4b239a8949f05a0805d4bc65f62f32dfe7b2eb4ce9cfcad03fcbbfe2564395d4b019bbca8599190ce81cbf18dba560a704a5648eef05736cacf2125b2145fd4aee83f968d90f15fbaeaaa47c477f3289289d2b0f0b42949ac033b0558dbceb67ac0359bb0a162d2d96cf363f06350d3ef83c4ff993e471a26f1c1398edf54672"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xe5, 0x4, "a63615cb099716844ab79322571c0429bb1c00aa225967398de216d39a112f29daa8359c779da17c1fa579159c5afef91d7802445644b92ddab9996f2593cc2125541e0ba8a629a3adc034f3e90a570b26a2619ac58248c502bcbab65f252079e6e15f5503bfd243eb416277e9ce964696212b8efb3fd0572d99f8702cb1bc82742b1d942ef9fe36e486c01352976b988192f4147ae4605a11160a3d50dfc4b44c15ee5d9701df676c2e274bd1d8cbe07978230c66298d88e65868a9758db511c6a22a27ad9cb00d73bc50e7e7fd2367f0bfe30728ee6a406ab9a1d1efdad5abc3"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x6d, 0x4, "d95f21b28e219658ce1c78d21db50d7d20f6b67e92334fcbe902651ab199c64e2a09f35a0ba129f1dcdb70ea8b0a2c1444a0c54041c2ce4f54bb26d682a1927f22884afd4b90d8ab822fbbab135e9aef6a57f371d1e59c6f6e00c472592dbbe1a49be6d25e9c629677"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x9c0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x81, 0x5, "53e07ca04df4b8f7981203c3099e6b579bcf958b20228930991166652787d0979471600aa686c603c9b8d0607c6482a23f1572ed3e213a6b0b1473929366fc88bef63268b718fe0a8a0b1b0c56e2abe54a797a7b9d0804797c4963cb315501f64fa202f4ae52fc157afda9960061ac60582a3490fd4e5fe5d8ae9e2cd8"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')\x15\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ';\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '#`}$/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '+&@)%\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ';\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '@+\xe4!)\xb6}-.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '^\\,%%%+\x00'}]}, {0x4}]}, @ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '[+%$]^:-&\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '(/!%]&!:\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x769, 0x4, "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"}]}]}, 0xec4}}, 0x0) 19:26:18 executing program 5: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xffff, &(0x7f0000000080)={[0x2000000]}, 0x8) 19:26:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 19:26:18 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000005c0)={{0x2, 0x0, @multicast1}, {0x0, @random="d449ce9d2f87"}, 0xa, {0x2, 0x0, @local}, 'caif0\x00'}) 19:26:18 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f00000001c0)={0x0, @broadcast, 0x0, 0x0, 'sh\x00'}, 0x2c) 19:26:18 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@remote}) 19:26:18 executing program 0: pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), 0x0, &(0x7f00000001c0), 0x0) [ 844.516745][T13748] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:0 19:26:21 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x0, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) 19:26:21 executing program 5: socketpair(0xf, 0x0, 0x0, &(0x7f0000000340)) 19:26:21 executing program 0: socketpair(0x11, 0xa, 0xfffffffb, &(0x7f0000000000)) 19:26:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)='s', 0x1}], 0x1}}, {{&(0x7f0000000600)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x2, 0x0) 19:26:21 executing program 4: socketpair(0x1, 0x0, 0x0, &(0x7f00000000c0)) 19:26:21 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000380)={0x2, 0x0, @broadcast}, 0x10) 19:26:21 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff}) mmap$xdp(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x0, 0x10, r0, 0x0) 19:26:21 executing program 0: bpf$MAP_CREATE(0x22, &(0x7f0000007480)=@bloom_filter, 0x48) 19:26:21 executing program 2: quotactl$Q_GETFMT(0x0, &(0x7f00000002c0)=ANY=[], 0xee01, 0x0) 19:26:21 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) fstat(r0, &(0x7f00000002c0)) 19:26:22 executing program 2: quotactl$Q_GETFMT(0x0, &(0x7f0000000000)=@filename='./file0\x00', 0xee00, 0x0) 19:26:22 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:22 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x9, 0x3, &(0x7f0000000440)=@framed={{0x61}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:26:22 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x12, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:26:22 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x9, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x30b) 19:26:22 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 19:26:22 executing program 2: openat$vnet(0xffffffffffffff9c, &(0x7f0000003540), 0x2, 0x0) 19:26:22 executing program 3: syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') 19:26:22 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:26:22 executing program 2: r0 = io_uring_setup(0x672f, &(0x7f0000000700)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) 19:26:22 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x40086602, 0x0) 19:26:22 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write(r0, &(0x7f00000001c0)="c3fefe4a9c5b6e78", 0x8) 19:26:23 executing program 4: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x100008}, 0x20) 19:26:23 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:23 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, 0x0) 19:26:23 executing program 5: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffffffffffffe) 19:26:23 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x418501, 0x0) 19:26:23 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) syz_io_uring_setup(0xeba, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) 19:26:23 executing program 4: bpf$BPF_PROG_TEST_RUN(0x1b, 0x0, 0x0) 19:26:23 executing program 0: gettid() syz_clone(0x4c028080, 0x0, 0x0, 0x0, &(0x7f0000001180), 0x0) 19:26:24 executing program 2: bpf$BPF_PROG_TEST_RUN(0x17, 0x0, 0x0) 19:26:24 executing program 5: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000001400)='C', &(0x7f00000014c0)='A'}, 0x48) 19:26:24 executing program 4: syz_clone(0x4480a500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 19:26:24 executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x9000) 19:26:24 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002e80)={0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=""/187, 0xb1}, 0x0) 19:26:27 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:27 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002e80)={0x0, 0x0, 0x0, 0x2, &(0x7f0000002dc0)=""/192, 0xc0}, 0x0) 19:26:27 executing program 5: bpf$OBJ_GET_MAP(0x7, &(0x7f0000001680)={&(0x7f0000001640)='./file0\x00'}, 0x10) unlink(&(0x7f00000015c0)='./file0\x00') 19:26:27 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e00)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:26:27 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 19:26:27 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001100)={0x6, 0x5, &(0x7f0000000040)=@framed={{}, [@generic={0x76}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000001080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:26:27 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) 19:26:27 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001100)={0x6, 0x5, &(0x7f0000000040)=@framed={{}, [@generic={0x76, 0x0, 0xf}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000001080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:26:27 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002e80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002dc0)=""/192, 0xc0}, 0x40000060) 19:26:27 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="18360000020000000000000000000000181b0000", @ANYRES32, @ANYBLOB="00000080000000bd9e"], &(0x7f0000000040)='GPL\x00', 0x3, 0xd4, &(0x7f0000000080)=""/212, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:26:27 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001080)={0x6, 0x7, &(0x7f0000001400)=@framed={{}, [@initr0, @map_idx_val]}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:26:27 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001100)={0x6, 0xd800, &(0x7f0000000000)=@raw=[@kfunc], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:26:28 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:28 executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001a00)='\r'}, 0x48) 19:26:28 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}]}}, &(0x7f0000000180)=""/201, 0x2a, 0xc9, 0x1}, 0x20) 19:26:28 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001840)={&(0x7f0000000500)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) 19:26:28 executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)}, 0x48) 19:26:28 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:26:28 executing program 4: bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0}, 0x38) 19:26:28 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @remote}}}, @ip_ttl={{0x14}}], 0x38}, 0x0) 19:26:28 executing program 0: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000d40)) 19:26:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000002780)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) 19:26:28 executing program 5: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x7, &(0x7f0000000680)=@raw=[@exit, @alu={0x7, 0x1, 0x4, 0xa, 0x0, 0x1}, @ldst={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, @exit, @alu={0x0, 0x0, 0xd}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}], &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, 0x0}, 0x80) 19:26:28 executing program 3: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000051c0)={0xffffffff}, 0x8) 19:26:29 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:29 executing program 5: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 19:26:29 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f0000001680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f0000001700)=""/159, 0x32, 0x9f, 0x1}, 0x20) 19:26:29 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f0000000180)=""/201, 0x2a, 0xc9, 0x1}, 0x20) 19:26:29 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d80), 0x4) 19:26:29 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f0000001680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5}}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x5}]}]}}, &(0x7f0000001700)=""/159, 0x4a, 0x9f, 0x1}, 0x20) 19:26:29 executing program 2: socketpair(0x15, 0x0, 0x0, &(0x7f0000000a00)) 19:26:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001240)="8a", 0x1}, {0x0}, {&(0x7f0000001300)='p', 0x1}], 0x3}, 0x0) 19:26:29 executing program 0: syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x8, 0x24, 0x5, 0x0, 0xfb, "52c52e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "c71b", '7'}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 19:26:29 executing program 3: syz_usb_connect$hid(0x502, 0x3f, &(0x7f0000001c00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x150a, 0x1203, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}, [{{0x9, 0x5, 0x2, 0x3, 0x400}}]}}}]}}]}}, 0x0) 19:26:29 executing program 4: syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000001c00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x150a, 0x1203, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x400}}]}}}]}}]}}, 0x0) 19:26:29 executing program 2: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x8, 0x24, 0x5, 0x0, 0x0, "52c52e"}, @mixer_unit={0xa, 0x24, 0x4, 0x0, 0x0, "30cbbf47c6"}, @input_terminal={0xc}, @processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x0, 0x0}, {0x3a, &(0x7f00000002c0)=@string={0x3a, 0x3, "a56f33566c7d2fe857c32b8877e68b9768ffdb4dbe859208a2863483dac13a9d8ede2f676725492100adc9a4376a479cc37bba01efdbc1a7"}}]}) [ 855.054952][ T5085] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 855.195120][ T8803] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 855.225240][ T8805] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 855.265424][T11833] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 855.425215][ T5085] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 855.449368][ T5085] usb 1-1: config 1 has no interface number 1 [ 855.457497][ T5085] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 855.468697][ T5085] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 855.482284][ T5085] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 19:26:30 executing program 5: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}) 19:26:30 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) [ 855.519936][ T5085] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 855.615370][ T8803] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 855.628891][ T8805] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 855.675328][T11833] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 855.699671][T11833] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 855.699730][T11833] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 855.699762][T11833] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 855.700468][T11833] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 855.700527][T11833] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 855.705506][ T5085] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 855.705553][ T5085] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.705590][ T5085] usb 1-1: Product: syz [ 855.705615][ T5085] usb 1-1: Manufacturer: syz [ 855.705641][ T5085] usb 1-1: SerialNumber: syz [ 855.725546][T13915] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 855.825280][ T8803] usb 5-1: New USB device found, idVendor=150a, idProduct=1203, bcdDevice= 0.40 [ 855.825325][ T8803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.825361][ T8803] usb 5-1: Product: syz [ 855.825386][ T8803] usb 5-1: Manufacturer: syz [ 855.825457][ T8803] usb 5-1: SerialNumber: syz [ 855.826573][ T8805] usb 4-1: New USB device found, idVendor=150a, idProduct=1203, bcdDevice= 0.40 [ 855.826617][ T8805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.826651][ T8805] usb 4-1: Product: syz [ 855.826675][ T8805] usb 4-1: Manufacturer: syz [ 855.826701][ T8805] usb 4-1: SerialNumber: syz [ 855.847691][T13924] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 855.847916][T13924] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 19:26:31 executing program 0: syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x8, 0x24, 0x5, 0x0, 0xfb, "52c52e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "c71b", '7'}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 855.858630][T13921] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 855.872960][ T8805] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 855.875211][ T759] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 855.897074][ T8803] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 856.091829][ T8805] usb 5-1: USB disconnect, device number 9 [ 856.095139][T11833] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 19:26:31 executing program 4: syz_usb_connect$uac1(0x0, 0xa9, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xb, 0x24, 0x8, 0x0, 0x0, 0x0, "6c12f823"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "ecec"}, @as_header={0x7, 0x24, 0x1, 0xba}, @format_type_i_discrete={0x8}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "b2c61619a6"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x45, 0x0}, {0x2c, &(0x7f00000002c0)=@string={0x2c, 0x3, "9a6a6770571a3484c774d5917f8aac5b14938f4c2e04ae0f279d4f5298be09453188c3ff555a8148ebdf"}}]}) [ 856.095184][T11833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.095230][T11833] usb 3-1: Product: 澥嘳絬썗蠫鞋ィ䷛薾࢒蚢茴쇚鴺术╧ⅉ관꓉樷鱇篃ƺꟁ 19:26:31 executing program 3: mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ff3000/0xd000)=nil, 0xd000) [ 856.095265][T11833] usb 3-1: SerialNumber: syz [ 856.101800][ T8803] usb 4-1: USB disconnect, device number 8 [ 856.114914][ T759] usb 6-1: Using ep0 maxpacket: 32 [ 856.125447][ T5085] usb 1-1: USB disconnect, device number 11 [ 856.166547][T11833] debugfs: Directory 'card3' with parent 'sound' already present! [ 856.203664][ T8371] udevd[8371]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 856.321873][ T759] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 856.321901][ T759] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 856.321923][ T759] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 19:26:31 executing program 3: syz_io_uring_setup(0x77e4, &(0x7f0000000440)={0x0, 0x0, 0x200}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) 19:26:31 executing program 2: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x8, 0x24, 0x5, 0x0, 0x0, "52c52e"}, @mixer_unit={0xa, 0x24, 0x4, 0x0, 0x0, "30cbbf47c6"}, @input_terminal={0xc}, @processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x0, 0x0}, {0x3a, &(0x7f00000002c0)=@string={0x3a, 0x3, "a56f33566c7d2fe857c32b8877e68b9768ffdb4dbe859208a2863483dac13a9d8ede2f676725492100adc9a4376a479cc37bba01efdbc1a7"}}]}) [ 856.459847][T11833] usb 3-1: USB disconnect, device number 8 [ 856.476258][ T759] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 856.476303][ T759] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.476337][ T759] usb 6-1: Product: syz [ 856.476359][ T759] usb 6-1: Manufacturer: syz [ 856.476383][ T759] usb 6-1: SerialNumber: syz [ 856.805242][ T759] usb 6-1: 0:2 : does not exist [ 856.939371][ T759] usb 6-1: USB disconnect, device number 15 [ 857.006238][ T8371] udevd[8371]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 19:26:31 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, 0x0) 19:26:31 executing program 3: syz_io_uring_setup(0x6afe, &(0x7f0000000040), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2136, &(0x7f0000000140), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), 0x0) [ 857.115377][T11833] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 857.123158][ T8803] usb 1-1: new high-speed USB device number 12 using dummy_hcd 19:26:31 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000068c0), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000006a00), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000006a80), &(0x7f0000006ac0)) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000006e40)={0x2020}, 0x2020) 19:26:31 executing program 3: process_vm_readv(0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/233, 0xe9}, {0x0}], 0x2, 0x0, 0x0, 0x0) [ 857.294983][ T5098] usb 3-1: new high-speed USB device number 9 using dummy_hcd 19:26:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x10, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_NMI(r3, 0xae9a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:26:31 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000340)={0x8}, 0x0, &(0x7f00000003c0)={0x2}, &(0x7f0000000400)={0x0, 0x3938700}, 0x0) [ 857.405032][T11833] usb 5-1: Using ep0 maxpacket: 32 [ 857.545667][ T8803] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 857.555490][ T8803] usb 1-1: config 1 has no interface number 1 [ 857.561836][ T8803] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 857.574429][ T8803] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 857.588026][ T8803] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 857.599489][ T8803] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 857.625168][T11833] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 857.638572][T11833] usb 5-1: config 1 has an invalid descriptor of length 166, skipping remainder of the config [ 857.650596][T11833] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 857.665499][ T5098] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 857.733252][ T5098] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 857.775219][ T8803] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 857.788674][ T8803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.795006][ T5098] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 857.818572][ T8803] usb 1-1: Product: syz [ 857.829810][ T8803] usb 1-1: Manufacturer: syz [ 857.840967][ T5098] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 857.841857][ T8803] usb 1-1: SerialNumber: syz [ 857.880218][ T5098] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 857.925539][T13942] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 857.932981][T11833] usb 5-1: language id specifier not provided by device, defaulting to English [ 857.944465][ T5098] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 858.095043][T11833] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 858.113615][T11833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.143268][T11833] usb 5-1: Product: syz [ 858.185252][T11833] usb 5-1: Manufacturer: 檚灧ᩗ萴瓇釕詿宬錔䲏Юྮ鴧剏뺘䔉蠱ᅢ婕䢁 [ 858.216782][T11833] usb 5-1: SerialNumber: syz [ 858.341835][ T8803] usb 1-1: USB disconnect, device number 12 [ 858.355273][ T5098] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 858.375865][ T5098] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.398942][ T5098] usb 3-1: Product: 澥嘳絬썗蠫鞋ィ䷛薾࢒蚢茴쇚鴺术╧ⅉ관꓉樷鱇篃ƺꟁ [ 858.413416][ T5098] usb 3-1: SerialNumber: syz [ 858.595192][T11833] usb 5-1: 0:2 : does not exist [ 858.638129][ T5098] debugfs: Directory 'card3' with parent 'sound' already present! [ 858.686222][T11833] usb 5-1: USB disconnect, device number 10 [ 858.806354][ T5098] usb 3-1: USB disconnect, device number 9 19:26:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x34}}, 0x0) 19:26:34 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89a1, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @remote}}}}) 19:26:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vxcan0\x00'}) 19:26:34 executing program 4: add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) 19:26:34 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:34 executing program 2: bpf$PROG_LOAD_XDP(0x17, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:26:34 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40) open(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) 19:26:34 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000540)={@empty, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "84dec7", 0x0, 0x2c, 0x0, @mcast1, @private2}}}}, 0x0) 19:26:34 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x149101) r1 = dup(0xffffffffffffffff) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000140)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, 0x0, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x80fe) syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000003000/0x1000)=nil, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000280)={0x7, 0x7, 0x3}, &(0x7f0000000300)=0x28) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)={0x98, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x98}}, 0x0) 19:26:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x14, 0x1, 0x6, 0x5}, 0x14}}, 0x0) 19:26:34 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x149101) dup(0xffffffffffffffff) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000140)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, 0x0, 0x0) bind$netlink(r1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000200)={0x86, 0x4, 0x0, 0x7f, 0x0, [@private2, @local]}, 0x28) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x80fe) syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000003000/0x1000)=nil, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000280)={0x7, 0x7, 0x3}, &(0x7f0000000300)=0x28) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0) 19:26:35 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x3}}, 0x26) 19:26:35 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 19:26:35 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002580)=ANY=[@ANYBLOB="020101024e02"], 0x1270}}, 0x0) 19:26:35 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_key={0x1}, @sadb_spirange={0x2}]}, 0x20000028}}, 0x0) 19:26:35 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x15, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x28}}, 0x0) 19:26:37 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:37 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x9, 0x1, &(0x7f0000000100)=@raw=[@ldst], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:26:37 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x401870cc, 0xffffffffffffffff) 19:26:37 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x1260, 0xffffffffffffffff) 19:26:37 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x15, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x5}]}, 0x18}}, 0x0) 19:26:37 executing program 3: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x161182) 19:26:37 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x40101283, 0xffffffffffffffff) 19:26:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x0, 0x0, 0x18}, 0x48) 19:26:37 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_int(r0, 0x1, 0x14, 0x0, &(0x7f0000000040)) 19:26:37 executing program 5: bpf$PROG_LOAD(0x7, 0x0, 0x0) 19:26:37 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$ptp(r0, &(0x7f0000000080)=""/91, 0x5b) 19:26:37 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x1263, 0xffffffffffffffff) 19:26:38 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:38 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_int(r0, 0x1, 0x38, 0x0, &(0x7f0000000040)) 19:26:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x0, 0x5c0, 0x1}, 0x48) 19:26:38 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c09, 0xffffffffffffffff) 19:26:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x1}, 0x14}}, 0x0) 19:26:38 executing program 3: bpf$PROG_LOAD(0x13, 0x0, 0x0) 19:26:38 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x126f898e, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) 19:26:38 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x4) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000080)={'security\x00', 0x4, "cd8af3f2"}, &(0x7f0000000000)=0x28) 19:26:38 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="6210020200"], 0x88) 19:26:38 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 19:26:38 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)) 19:26:38 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x401070cd, 0xffffffffffffffff) 19:26:39 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r1, 0x3}, 0x14}}, 0x0) 19:26:39 executing program 2: socketpair(0x29, 0x2, 0x0, &(0x7f0000000100)) 19:26:39 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x4) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000080)={'security\x00', 0x4, "cd8af3f2"}, &(0x7f0000000000)=0x28) 19:26:39 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000040)) 19:26:39 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_int(r0, 0x1, 0x1, 0x0, &(0x7f0000000040)) 19:26:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c0a, 0xffffffffffffffff) 19:26:39 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x15, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1}]}, 0x18}}, 0x0) 19:26:39 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x161183, 0x0) 19:26:39 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x4) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000080)={'security\x00', 0x4, "cd8af3f2"}, &(0x7f0000000000)=0x28) 19:26:39 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[], 0x88) 19:26:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x0, 0x0, 0x1}, 0x48) 19:26:40 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:40 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x4) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000080)={'security\x00', 0x4, "cd8af3f2"}, &(0x7f0000000000)=0x28) 19:26:40 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x80041284, 0xffffffffffffffff) 19:26:40 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1a, 0x1, &(0x7f0000000100)=@raw=[@ldst], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:26:40 executing program 0: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x3d4c, &(0x7f0000000140)={0x0, 0x0, 0x2}) 19:26:40 executing program 3: bpf$PROG_LOAD(0x1b, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:26:40 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 19:26:40 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/ipc\x00') 19:26:40 executing program 5: recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)=@in={0x10, 0x2}, 0x10) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) 19:26:40 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) getsockopt$inet6_int(r0, 0x29, 0x26, 0x0, &(0x7f0000000040)) 19:26:40 executing program 3: symlinkat(&(0x7f0000001b00)='./file1\x00', 0xffffffffffffff9c, 0x0) 19:26:40 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockname(r0, 0x0, &(0x7f0000000040)) 19:26:40 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:40 executing program 2: connect$unix(0xffffffffffffffff, &(0x7f0000002680)=@abs={0x8}, 0x8) 19:26:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x1, 0x0, 0x0) 19:26:40 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x1c, 0x84, 0x4, {0x0, 0x4100}}], 0x1c}, 0x0) 19:26:40 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) getsockname(r0, 0x0, &(0x7f0000000280)) 19:26:40 executing program 5: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) lseek(r0, 0x0, 0x0) 19:26:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) accept4$inet(r0, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x0) 19:26:41 executing program 0: openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) 19:26:41 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0x1c, 0x1c, 0x2}, 0x1c) 19:26:41 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x401, 0x0, &(0x7f00000000c0)) 19:26:41 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) getsockname(r0, 0x0, &(0x7f0000000140)) 19:26:41 executing program 5: getresgid(&(0x7f00000003c0), 0x0, &(0x7f0000000080)) 19:26:41 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0x0, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:41 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000001a00)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000001780)=[{0xc}, {0xc}], 0x18}, 0x0) 19:26:41 executing program 3: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x28000000) 19:26:41 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000001c80), 0x8) 19:26:41 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x1700, &(0x7f0000002a00)}, 0x0) 19:26:41 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000000)=@abs={0x8, 0x1}, 0x8) 19:26:42 executing program 2: fchownat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) 19:26:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_linger(r0, 0xffff, 0x80, 0x0, &(0x7f0000000040)) 19:26:42 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x902, &(0x7f0000000040), 0x4) 19:26:42 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) 19:26:42 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x12, &(0x7f00000001c0), 0x1) bind$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0xffffffffffffffd3, 0x2}, 0x10) close(r0) 19:26:42 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0) 19:26:42 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0x0, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:42 executing program 3: syz_open_dev$mouse(0x0, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x2) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000740)="0f322e0f094c0fc7ae5e1d14c4c7442400f6ffffffc4025d3c6ff9c744240600000000c4c2f59b13b9710500000f320f21d5c7442400b4000000c744240200400000c7442406000000000f011c2466baf80cb8c636638bef66bafc0c66b829018ed066ef0f01c5c744240000300000c74424024b530000c74424060000000f011c24", 0x82}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) 19:26:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000300)=@generic) 19:26:42 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000400)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540), 0x8, 0x10, 0x0}, 0x80) 19:26:42 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 19:26:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002200)={'wlan1\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x42000010000a006) 19:26:43 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000800)={&(0x7f00000003c0), 0x7, &(0x7f00000007c0)={&(0x7f0000000400)={0x0, 0x0, 0x0, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "e9b8e9777e216d4c"}}, 0x48}}, 0x0) 19:26:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:26:43 executing program 5: write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x9, 0x2, 0x5}}, 0x30) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000040)={0x0, 0x81, 0x339}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000440)={r0, "bab575f92e6febe16798648ccadaff05"}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001440)={{0x1, 0x1, 0x18, r1, {0xee00, 0x0}}, './file0\x00'}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001480)={0x0, 0x0, "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", "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"}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000024c0)=[@timestamp, @timestamp, @timestamp, @timestamp, @mss={0x2, 0x4}, @sack_perm, @mss={0x2, 0x5}], 0x7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r3}}, './file0\x00'}) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000002580)={&(0x7f0000002540)=""/9, 0x305000, 0x1000, 0x7}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002600)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000025c0)='\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002640)={r5}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000002780), r4) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000004d80)={0xffffffff, &(0x7f0000004c80)="379172e9289f0c00c820d80904cffc32daa04b5ad8984a3bdba52e695cfb8516410557b365b8c9716efbf0a10befd92494e319f1cd4f8c23148cf15a50b29ae8b2eae57fb72f7c4a24f6407953fa8a24fcb47c7b0ebc7df16d2214a93204418f80eef342aaa84f89cc80522dfbc29fd458d6c73ea87566a9d56a3b6f2220f3c2ad0ae38c2ecc3d8add5f48b7afd586c24535e2557d10ac1fa0c34b81ba5b66730e4f7dc1dc419ea9d0a8344b7abab22be0550c73af529d75553cf19ebfe994b1cdc5be7001d5f8cb58076f8b9f2711081ba6035088a5b32ff60131ac0a59e4e7a8"}) 19:26:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002200)={'wlan1\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x42000010000a006) 19:26:43 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="26643e0fc7b002000000f40f01c50f01cb666536f20f2265f30f323e0f01c42626640f1ee8b805000000b9000000000f01c166ba2000ec", 0x37}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:26:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 19:26:46 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0x0, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:46 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 19:26:46 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001300000004000100080004"], 0x44}}, 0x0) 19:26:46 executing program 3: syz_open_dev$mouse(0x0, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x2) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000740)="0f322e0f094c0fc7ae5e1d14c4c7442400f6ffffffc4025d3c6ff9c744240600000000c4c2f59b13b9710500000f320f21d5c7442400b4000000c744240200400000c7442406000000000f011c2466baf80cb8c636638bef66bafc0c66b829018ed066ef0f01c5c744240000300000c74424024b530000c74424060000000f011c24", 0x82}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) 19:26:46 executing program 2: syz_io_uring_setup(0x5137, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0x0) 19:26:46 executing program 0: syz_io_uring_setup(0x5137, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) 19:26:46 executing program 0: r0 = syz_io_uring_setup(0x5137, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000300), 0x0) 19:26:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="26643e0fc7b002000000f40f01c50f01cb666536f20f2265f30f323e0f01c42626640f1ee8b805000000b9000000000f01c166ba2000ec", 0x37}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:26:46 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) r1 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffb) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:26:46 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x0, 0x0, 0x2f8, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 19:26:47 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x6, 0x4, 0x1000000, 0xc6b}, 0x48) 19:26:47 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) r1 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffb) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:26:49 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x0, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:49 executing program 0: r0 = syz_io_uring_setup(0x5137, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000300), 0x0) 19:26:49 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, 0x0) 19:26:49 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f00000008c0)=ANY=[], &(0x7f0000000940)=0x63) 19:26:49 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7a, 0x0, &(0x7f0000000940)=0x63) 19:26:49 executing program 3: syz_open_dev$mouse(0x0, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x2) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000740)="0f322e0f094c0fc7ae5e1d14c4c7442400f6ffffffc4025d3c6ff9c744240600000000c4c2f59b13b9710500000f320f21d5c7442400b4000000c744240200400000c7442406000000000f011c2466baf80cb8c636638bef66bafc0c66b829018ed066ef0f01c5c744240000300000c74424024b530000c74424060000000f011c24", 0x82}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) 19:26:49 executing program 0: socket(0x2, 0x80005, 0x0) 19:26:49 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') write$nci(r0, 0x0, 0x0) 19:26:49 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10031, 0xffffffffffffffff, 0x8000000) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 19:26:49 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') read$hiddev(r0, &(0x7f0000000140)=""/207, 0xcf) 19:26:49 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') write$nci(r0, 0x0, 0x0) [ 875.277144][ T1217] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.277270][ T1217] ieee802154 phy1 wpan1: encryption failed: -22 19:26:50 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/arp\x00') read$hiddev(r0, &(0x7f0000000040)=""/197, 0xc5) 19:26:51 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x0, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:51 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10}, 0x48) 19:26:51 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f00000008c0)=ANY=[], &(0x7f0000000940)=0x63) 19:26:51 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='environ\x00') read$hiddev(r0, 0x0, 0x0) 19:26:51 executing program 0: munmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2032, 0xffffffffffffffff, 0x0) 19:26:51 executing program 3: syz_open_dev$mouse(0x0, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x2) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000740)="0f322e0f094c0fc7ae5e1d14c4c7442400f6ffffffc4025d3c6ff9c744240600000000c4c2f59b13b9710500000f320f21d5c7442400b4000000c744240200400000c7442406000000000f011c2466baf80cb8c636638bef66bafc0c66b829018ed066ef0f01c5c744240000300000c74424024b530000c74424060000000f011c24", 0x82}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) 19:26:51 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10031, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2032, 0xffffffffffffffff, 0x0) 19:26:51 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='environ\x00') read$hiddev(r0, 0x0, 0x1f00) 19:26:51 executing program 0: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') 19:26:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') read$hiddev(r0, &(0x7f0000000140)=""/207, 0xfdef) 19:26:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsync(0xffffffffffffffff) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000001640)={0x2, &(0x7f0000001600)=[{}, {}]}) 19:26:52 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0x1}, 0x48) 19:26:54 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x0, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:54 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/sockstat6\x00') read$hiddev(r0, &(0x7f0000000040)=""/197, 0xc5) 19:26:54 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') read$hiddev(r0, 0x0, 0x0) 19:26:54 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') read$hiddev(r0, &(0x7f0000000140)=""/207, 0xfdef) 19:26:54 executing program 3: r0 = memfd_secret(0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) 19:26:54 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000d41000/0x2000)=nil, 0x2000, 0x0, 0x10031, 0xffffffffffffffff, 0x8000000) mlock2(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0) 19:26:54 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/197, 0xc5) 19:26:54 executing program 5: gettid() move_pages(0x0, 0x2000000000000008, &(0x7f0000000080)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000cd6000/0x2000)=nil], 0x0, &(0x7f0000000080), 0x0) 19:26:54 executing program 4: mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10031, 0xffffffffffffffff, 0x8000000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2, 0x0) 19:26:54 executing program 2: ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0xfffff000}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x1000000, 0x100000000}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r0 = memfd_secret(0x80000) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000001c0)='silent\x00', 0x0, 0x0) r1 = memfd_secret(0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000200)={0x0, 0x3, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280), 0x106, 0x4}}, 0x20) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={0x0, &(0x7f0000000380)=[{}, {}, {}], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], 0x3, 0x6}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000640)={0x2, 0x0, &(0x7f00000005c0)}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000006c0)=[0x2, 0x10001]) memfd_create(&(0x7f00000007c0)='/dev/ttynull\x00', 0x4) 19:26:54 executing program 4: mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4) 19:26:54 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='attr/fscreate\x00') write$yama_ptrace_scope(r0, 0x0, 0x0) [ 880.474920][ T759] usb 3-1: new high-speed USB device number 10 using dummy_hcd 19:26:55 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x0, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:26:55 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') read$hiddev(r0, 0x0, 0x1f00) 19:26:55 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) 19:26:55 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='attr/fscreate\x00') write$yama_ptrace_scope(r0, &(0x7f0000000140)='2\x00', 0x2) [ 881.005204][ T759] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 881.015040][ T759] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 19:26:55 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score\x00') read$hiddev(r0, &(0x7f0000000040)=""/197, 0xfffffdef) 19:26:55 executing program 3: write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000180)={0x7}, 0x7) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2, 0x0) [ 881.062556][ T759] usb 3-1: Product: syz [ 881.068401][ T759] usb 3-1: Manufacturer: syz [ 881.073076][ T759] usb 3-1: SerialNumber: syz [ 881.146534][ T759] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 19:26:55 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') read$hiddev(r0, &(0x7f0000000040)=""/197, 0xc5) [ 881.365255][ T5102] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 881.854998][ T759] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 881.885236][ T5102] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 881.897753][ T5102] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.918277][ T5102] usb 1-1: Product: syz [ 881.922526][ T5102] usb 1-1: Manufacturer: syz [ 881.927435][ T5102] usb 1-1: SerialNumber: syz [ 881.986021][ T5102] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 882.060912][ T5098] usb 3-1: USB disconnect, device number 10 [ 882.575058][ T5102] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 882.796633][T11835] usb 1-1: USB disconnect, device number 13 [ 882.964022][ T759] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 882.973260][ T759] ath9k_htc: Failed to initialize the device [ 882.989794][ T5098] usb 3-1: ath9k_htc: USB layer deinitialized [ 883.675063][ T5102] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 883.682164][ T5102] ath9k_htc: Failed to initialize the device [ 883.689187][T11835] usb 1-1: ath9k_htc: USB layer deinitialized 19:27:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') read$hiddev(r0, &(0x7f0000000140)=""/207, 0xfdef) 19:27:01 executing program 4: mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2, 0x0) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000240)=0x7fff, 0x155, 0x1) 19:27:01 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x48) 19:27:01 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x0, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:01 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x2000002, 0x12, r0, 0x82000000) 19:27:01 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10031, 0xffffffffffffffff, 0x8000000) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2, 0x0) 19:27:01 executing program 3: r0 = io_uring_setup(0x68d8, &(0x7f0000000040)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x13, r0, 0x10000000) 19:27:01 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000e40), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f00000001c0)) 19:27:01 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) 19:27:01 executing program 0: futex_waitv(&(0x7f00000020c0)=[{0x0, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000002c40), 0x0) 19:27:01 executing program 5: add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x67, 0xfffffffffffffff8) 19:27:01 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000240)=@userptr={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "db2f4061"}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000bc0)=@mmap={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8e3408e0"}}) 19:27:01 executing program 0: futex_waitv(&(0x7f00000020c0)=[{0x0, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000002c40), 0x0) 19:27:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x3, 0xf68}]}}}]}, 0x3c}}, 0x0) 19:27:01 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) accept4$tipc(r0, 0x0, 0x0, 0x80800) [ 887.521452][T14412] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 19:27:02 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x0, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:02 executing program 2: r0 = socket(0x11, 0xa, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000080), &(0x7f0000001140)=0x10) 19:27:02 executing program 0: getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f00000004c0), 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000580)=@name, &(0x7f00000005c0)=0x10, 0x100000) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000600)={0x43, 0x1}, 0x10) socket$tipc(0x1e, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001940)='./cgroup.net/syz1\x00', 0x200002, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 19:27:02 executing program 5: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x196b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x40}}]}}}]}}]}}, 0x0) 19:27:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x2, 0xf68}]}}}]}, 0x3c}}, 0x0) 19:27:02 executing program 4: syz_open_dev$rtc(&(0x7f0000002d00), 0x0, 0x0) [ 887.934723][T14420] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 19:27:02 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040), &(0x7f0000001140)=0x6b) 19:27:02 executing program 0: r0 = socket(0x11, 0xa, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000080), &(0x7f0000001140)=0x10) 19:27:02 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000d40)={0x420}, 0x420}}, 0x0) 19:27:02 executing program 3: socketpair(0x3, 0x0, 0x0, &(0x7f0000001380)) 19:27:02 executing program 0: r0 = socket(0x11, 0xa, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x4a, 0x0, &(0x7f0000001140)) [ 888.175208][ T8803] usb 6-1: new high-speed USB device number 16 using dummy_hcd 19:27:02 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x4) [ 888.585340][ T8803] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 888.776054][ T8803] usb 6-1: New USB device found, idVendor=0b05, idProduct=196b, bcdDevice= 0.40 [ 888.796127][ T8803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.821127][ T8803] usb 6-1: Product: syz [ 888.840545][ T8803] usb 6-1: Manufacturer: syz [ 888.861465][ T8803] usb 6-1: SerialNumber: syz 19:27:03 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x0, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x2}, 0x9, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1f4}}, 0x0) 19:27:03 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x6, 0x0, 0x0) [ 888.936483][ T8803] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 889.139928][T11835] usb 6-1: USB disconnect, device number 16 19:27:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0, 0x2}}], 0x1, 0x0, 0x0) 19:27:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0xffffffff00000000, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0207fd0204000000d29600000000000002000a001f0000007e0000000000"], 0x20}}, 0x0) 19:27:04 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@mcast1, 0x0, 0x6c}, 0x2, @in=@broadcast, 0x0, 0x1}}, 0xe8) 19:27:04 executing program 2: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x5}, &(0x7f00000000c0)={0x3}, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={[0x2e4]}, 0x8}) 19:27:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x1) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0xffffffff00000000, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0207fd0204000000d29600000000000002000a001f0000007e0000"], 0x20}}, 0x0) 19:27:04 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x48, 0x0, 0x4) 19:27:04 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x30, 0x0, 0x90) 19:27:04 executing program 5: setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x88, 0xdfb, @vifc_lcl_addr=@multicast2, @loopback}, 0x10) r0 = getpid() kcmp$KCMP_EPOLL_TFD(r0, r0, 0x3, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x1b, 0x5, 0x950, 0x0, 0x2d0, 0xffffffff, 0x0, 0x0, 0x880, 0x880, 0xffffffff, 0x880, 0x880, 0x5, 0x0, {[{{@uncond, 0x0, 0x288, 0x2d0, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty, @private0}}, @common=@inet=@hashlimit2={{0x150}, {'wg0\x00'}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@multicast2, @ipv6=@loopback, @icmp_id, @icmp_id}}}, {{@ipv6={@private2, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'ipvlan1\x00', 'pimreg0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x228, 0x270, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'veth0_to_hsr\x00'}}, @common=@ah={{0x30}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@empty, @port, @gre_key}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, @loopback, @rand_addr=' \x01\x00', @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @empty, @private0, @dev, @remote, @private1]}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@private2, @ipv6=@mcast2, @gre_key, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9b0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x4, 0x7, 0x4, @private2, @local, 0x80, 0x20, 0x8001, 0x100}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', r2, 0x29, 0x74, 0x9, 0x3, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x8, 0x40, 0x6, 0x9}}) 19:27:04 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x0, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:04 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x21, 0x0, 0x29) [ 890.011859][T14472] x_tables: duplicate underflow at hook 1 19:27:04 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 19:27:04 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000a00)=@srh, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0) 19:27:04 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, 0x0) 19:27:06 executing program 4: syz_io_uring_setup(0x5578, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x36d}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), 0x0) syz_io_uring_setup(0x3da1, &(0x7f0000000200), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 19:27:06 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x0) 19:27:06 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r2, 0x0, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0xffffffff00000000, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0207fd0204000000d29600000000000002000a00"], 0x20}}, 0x0) 19:27:06 executing program 2: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000d00)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg$inet6(r1, &(0x7f0000002340)=[{{0x0, 0x543, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x28}}], 0x3e8, 0x0) 19:27:06 executing program 3: rt_sigaction(0x36, &(0x7f0000000040)={&(0x7f0000000280)="f30fa6d0c44249918c1c81260000c42265b84fab0f80c225000066440f5c24f3447801f9da17c4e37d19fa00c4a1fff00926364381a712f0ddebb8400000c482599bf2", 0x0, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8, &(0x7f00000001c0)) 19:27:06 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb43, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022470000005c61de004b"], 0x0}, 0x0) 19:27:06 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, 0x0, 0x0) [ 892.615066][ T5085] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 892.976212][ T5085] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.014276][ T5085] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.063970][ T5085] usb 1-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 893.135695][ T5085] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.300594][ T5085] usb 1-1: config 0 descriptor?? [ 893.977496][ T5085] smartjoyplus 0003:0B43:0003.0009: unknown main item tag 0x6 [ 894.007328][ T5085] smartjoyplus 0003:0B43:0003.0009: unknown main item tag 0x0 [ 894.036734][ T5085] smartjoyplus 0003:0B43:0003.0009: item fetching failed at offset 4/7 [ 894.069425][ T5085] smartjoyplus 0003:0B43:0003.0009: parse failed [ 894.095842][ T5085] smartjoyplus: probe of 0003:0B43:0003.0009 failed with error -22 [ 894.185623][ T5085] usb 1-1: USB disconnect, device number 14 19:27:09 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x0, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:09 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000), 0x4) 19:27:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = getpgrp(0x0) fcntl$setown(r0, 0x6, r1) 19:27:09 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x24}, 0x1c) 19:27:09 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x44ce791dd92a43c1, 0x0) signalfd4(r0, &(0x7f0000000600), 0x8, 0x0) 19:27:09 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb43, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022470000005c61de004b"], 0x0}, 0x0) 19:27:10 executing program 5: syz_clone3(&(0x7f00000001c0)={0x3e105480, 0x0, 0x0, &(0x7f0000000080), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19:27:10 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x12, 0x0, 0x4) 19:27:10 executing program 4: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x163443, 0x0) 19:27:10 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 19:27:10 executing program 5: io_setup(0x8, &(0x7f0000000000)=0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000440)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}]) 19:27:10 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20}, 0x20}}, 0x0) [ 895.825039][ T8803] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 896.215136][ T8803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.232313][ T8803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.242757][ T8803] usb 1-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 896.259899][ T8803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.279489][ T8803] usb 1-1: config 0 descriptor?? 19:27:10 executing program 3: clock_gettime(0x0, &(0x7f0000000280)) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) io_setup(0xbe44, &(0x7f0000000680)) 19:27:10 executing program 4: io_setup(0x81, &(0x7f0000000380)) socket$key(0xf, 0x3, 0x2) syz_open_dev$vcsa(&(0x7f0000000500), 0x0, 0x0) io_setup(0xbe44, &(0x7f0000000680)) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) 19:27:10 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000040)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00'}}) 19:27:10 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x0, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:10 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x5452, &(0x7f0000000180)) [ 896.517836][ T27] audit: type=1326 audit(1684092431.006:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14641 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa35b08c169 code=0x0 [ 896.767583][ T8803] smartjoyplus 0003:0B43:0003.000A: unknown main item tag 0x6 [ 896.786387][ T8803] smartjoyplus 0003:0B43:0003.000A: unknown main item tag 0x0 [ 896.832641][ T8803] smartjoyplus 0003:0B43:0003.000A: item fetching failed at offset 4/7 [ 896.863067][ T8803] smartjoyplus 0003:0B43:0003.000A: parse failed [ 896.892214][ T8803] smartjoyplus: probe of 0003:0B43:0003.000A failed with error -22 [ 896.989876][ T8803] usb 1-1: USB disconnect, device number 15 19:27:12 executing program 0: clock_getres(0x7, &(0x7f0000000000)) clock_getres(0x2, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) io_pgetevents(0x0, 0xa465, 0x1, &(0x7f0000000080)=[{}], &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0xfffffffffffffffb]}, 0x8}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000001dc0), 0x100, 0x0) io_setup(0x7, &(0x7f0000003640)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000038c0)={0x6}, 0x4) 19:27:12 executing program 2: io_setup(0xc, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) io_getevents(r0, 0x4, 0x4, &(0x7f0000000300)=[{}, {}, {}, {}], &(0x7f0000000400)={0x0, r1+10000000}) 19:27:12 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x60801) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) 19:27:12 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) 19:27:12 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 19:27:12 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x0, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:12 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2}, {0x6}]}) 19:27:12 executing program 5: syz_clone(0x0, &(0x7f0000001a00), 0x0, &(0x7f0000001b00), &(0x7f0000001b40), &(0x7f0000001b80)="9d476edece3a4328c592035b3755cf5d7c0d428b0a8320f84c3b6714ac0ae626a9487344fdb131c27f4812d11f8a4d5c7e77938206a661") syz_clone(0x60000000, 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)='^') 19:27:12 executing program 3: mknod(&(0x7f0000000200)='./file0\x00', 0x8000, 0x0) open$dir(&(0x7f0000000300)='./file0\x00', 0x400, 0x0) 19:27:12 executing program 0: mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 19:27:12 executing program 2: syz_clone(0x48102280, 0x0, 0x0, 0x0, 0x0, 0x0) 19:27:12 executing program 4: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:27:12 executing program 3: sigaltstack(&(0x7f0000001000), 0x0) 19:27:12 executing program 0: quotactl$Q_GETQUOTA(0x0, &(0x7f0000000500)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) [ 897.716849][ T27] audit: type=1326 audit(1684092432.206:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14666 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ed788c169 code=0x0 [ 897.949107][ C0] vkms_vblank_simulate: vblank timer overrun 19:27:12 executing program 3: socketpair(0x2c, 0x0, 0x0, &(0x7f0000000600)) 19:27:12 executing program 0: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_init(0x0, 0x0) 19:27:12 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5460, &(0x7f0000000100)) 19:27:14 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x0, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:14 executing program 3: rt_sigaction(0x36, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8, &(0x7f00000001c0)) 19:27:14 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback}}) 19:27:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000040), 0x2000004c, &(0x7f0000000300)={&(0x7f0000000100)={0x215}, 0x1f4}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000a00)=@srh, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r3 = getuid() getresgid(&(0x7f00000000c0), &(0x7f0000000140)=0x0, &(0x7f0000000180)) getgroups(0x4, &(0x7f00000001c0)=[0xffffffffffffffff, 0xee00, 0xee01, 0x0]) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000380)={0x3d0, 0x0, 0x0, [{{0x6, 0x1, 0x8, 0x41dc, 0x7fff, 0x5, {0x2, 0x8000000000000001, 0x2, 0xb6f, 0x8, 0xff, 0x1000, 0xfffffffd, 0x10000, 0x6000, 0xf80a, 0xee01, 0xffffffffffffffff, 0x7, 0x7}}, {0x3, 0x5, 0x5, 0x1ff, 'gre0\x00'}}, {{0x3, 0x2, 0x5, 0x400, 0x0, 0x0, {0x6, 0x2, 0xf5, 0xfc, 0x58b, 0x7, 0x8, 0x1, 0x7, 0xa000, 0x7, 0xee01, 0xee00, 0x20, 0x2}}, {0x3, 0x0, 0x5, 0x0, 'gre0\x00'}}, {{0x1, 0x1, 0x7, 0x113e, 0x0, 0x5, {0x1, 0x7a, 0x8, 0xffffffffffff8001, 0x9, 0x400, 0x8000, 0x1000, 0xbc2f, 0x1000, 0x80, r3, r4, 0x80000000, 0x7}}, {0x0, 0x1000, 0x5, 0xfffffffc, 'gre0\x00'}}, {{0x1, 0x3, 0x6, 0x80000000, 0x3f, 0x3, {0x4, 0x100000001, 0x3, 0x8, 0x4, 0xd5, 0x8, 0x7, 0x20, 0x4000, 0x1, 0xee00, 0xee01, 0x2, 0x57a}}, {0x0, 0x8, 0x2, 0x8, '-@'}}, {{0x6, 0x0, 0x7ff, 0x0, 0x2, 0xc494, {0x6, 0x0, 0x10001, 0x0, 0x10001, 0x1f, 0x400, 0x101, 0x4, 0x6000, 0x81, 0xffffffffffffffff, 0xee01, 0x200, 0x9}}, {0x4, 0xffffffff7fffffff, 0x5, 0x2, 'gre0\x00'}}, {{0x0, 0x3, 0x101, 0x536, 0x7f, 0x7, {0x2, 0x2b, 0x1ff2, 0x8d, 0xff, 0x5, 0x1, 0x7, 0x81, 0x2000, 0x3, 0xee00, r5, 0x7, 0xd9}}, {0x6, 0x4, 0x1, 0x401, '\x00'}}]}, 0x3d0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={@private0, 0x65, r2}) 19:27:14 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x0, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:14 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x0, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:14 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x0, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:14 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x0, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:15 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback}}) 19:27:15 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback}}) 19:27:15 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback}}) 19:27:16 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x0, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:22 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:22 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x0, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:22 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x0, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:22 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x0, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:22 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x0, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:22 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x0, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:30 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:30 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x0, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:30 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x0, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:30 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x0, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:30 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x0, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:30 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x0, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:36 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x0, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:37 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x0, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:37 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x0, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:37 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:37 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x0, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:38 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x0, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:38 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x0, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:43 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0x0, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:45 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:45 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0x0, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:46 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x0, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:46 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0x0, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:47 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0x0, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:50 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0x0, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) [ 936.717010][ T1217] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.717109][ T1217] ieee802154 phy1 wpan1: encryption failed: -22 19:27:51 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:52 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:54 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:54 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0x0, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:55 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0x0, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:56 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0x0, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:58 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0x0, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:59 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0x0, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:27:59 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:02 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:03 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0x0, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:05 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:05 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:07 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0x0, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:07 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0x0, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:07 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:11 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:11 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:13 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:15 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:15 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:15 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x0, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:18 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:19 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:20 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:21 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:22 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x0, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:22 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:22 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x0, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:27 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:28 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:28 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:30 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:30 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:30 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x0, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:31 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x0, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:35 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x0, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:36 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:36 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x0, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:37 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x0, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:39 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x0, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:39 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x0, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:39 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x0, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:41 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x0, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:43 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:45 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:45 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x0, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:47 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x0, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:48 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:49 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x0, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:51 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x0, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:51 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, 0x0) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) [ 998.156583][ T1217] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.163439][ T1217] ieee802154 phy1 wpan1: encryption failed: -22 19:28:53 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:53 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:55 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:56 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x0, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:59 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:28:59 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, 0x0) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:01 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x0, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:01 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:04 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:04 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x0, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:07 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, 0x0) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:07 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:10 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:10 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x0, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:11 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x0, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:12 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, 0x0) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:12 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x0, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:14 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x0, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:15 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:19 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x0, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:19 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x0, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:20 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x0, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:20 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x0, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:22 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x0, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:24 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x0, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:26 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x0, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:27 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x0, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:27 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x0, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:27 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x0, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:28 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:29 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x0, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:34 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:35 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x0, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:35 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x0, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:36 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x0, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:36 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x0, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:37 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:37 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x0, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:38 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:43 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x0, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:43 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x0, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:44 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x0, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:44 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x0, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:45 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x0, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:45 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x0, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:46 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x0, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:52 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x0, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:52 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x0, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:52 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x0, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:53 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x0, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:53 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x0, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) [ 1059.607178][ T1217] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.613664][ T1217] ieee802154 phy1 wpan1: encryption failed: -22 19:29:54 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x0, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:56 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x0, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:29:58 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:00 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:00 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:00 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x0, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:01 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:01 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x0, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:03 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:05 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:08 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:08 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:09 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:09 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:11 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:12 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:13 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:13 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x0, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f297c0eccf859705acf9834f5b4b6039b63eac610b", 0x15}, {&(0x7f0000001400)="c98812c1be8a", 0xffffffc8}, {&(0x7f00000012c0)="406f2bef596a8a3130012ee7bf", 0xd}, {&(0x7f0000001300)="7f5549f794326461", 0x8}], 0x4, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0xffffffffffffff5f, &(0x7f0000002600)=[{&(0x7f00000005c0)=""/120, 0x78}, {&(0x7f0000001540)=""/4096, 0x1003}], 0x2, 0x0, 0x600, 0x1003}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/37, 0x24}], 0x1, 0x0, 0x0, 0x7fffef92}}, {{&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/110, 0x6e}, {&(0x7f0000000340)=""/160, 0xfffffeaf}, {&(0x7f0000000080)=""/24, 0x18}], 0x3, &(0x7f0000000440)=""/182, 0xb6}}], 0x3, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)}, 0x0) 19:30:16 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:16 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:16 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x0, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:16 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:19 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:21 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:23 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:24 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:24 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f297c0eccf859705acf9834f5b4b6039b63eac610b", 0x15}, {&(0x7f0000001400)="c98812c1be8a", 0xffffffc8}, {&(0x7f00000012c0)="406f2bef596a8a3130012ee7bf", 0xd}, {&(0x7f0000001300)="7f5549f794326461", 0x8}], 0x4, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0xffffffffffffff5f, &(0x7f0000002600)=[{&(0x7f00000005c0)=""/120, 0x78}, {&(0x7f0000001540)=""/4096, 0x1003}], 0x2, 0x0, 0x600, 0x1003}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/37, 0x24}], 0x1, 0x0, 0x0, 0x7fffef92}}, {{&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/110, 0x6e}, {&(0x7f0000000340)=""/160, 0xfffffeaf}, {&(0x7f0000000080)=""/24, 0x18}], 0x3, &(0x7f0000000440)=""/182, 0xb6}}], 0x3, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001b80)={0x0, 0x0, 0x0}, 0x0) 19:30:26 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:28 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:28 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:30 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:30 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f297c0eccf859705acf9834f5b4b6039b63eac610b", 0x15}, {&(0x7f0000001400)="c98812c1be8a", 0xffffffc8}, {&(0x7f00000012c0)="406f2bef596a8a3130012ee7bf", 0xd}, {&(0x7f0000001300)="7f5549f794326461", 0x8}], 0x4, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0xffffffffffffff5f, &(0x7f0000002600)=[{&(0x7f00000005c0)=""/120, 0x78}, {&(0x7f0000001540)=""/4096, 0x1003}], 0x2, 0x0, 0x600, 0x1003}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/37, 0x24}], 0x1, 0x0, 0x0, 0x7fffef92}}, {{&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/110, 0x6e}, {&(0x7f0000000340)=""/160, 0xfffffeaf}, {&(0x7f0000000080)=""/24, 0x18}], 0x3, &(0x7f0000000440)=""/182, 0xb6}}], 0x3, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)}, 0x0) 19:30:31 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:32 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:33 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:33 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:35 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f297c0eccf859705acf9834f5b4b6039b63eac610b", 0x15}, {&(0x7f0000001400)="c98812c1be8a", 0xffffffc8}, {&(0x7f00000012c0)="406f2bef596a8a3130012ee7bf", 0xd}, {&(0x7f0000001300)="7f5549f794326461", 0x8}], 0x4, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0xffffffffffffff5f, &(0x7f0000002600)=[{&(0x7f00000005c0)=""/120, 0x78}, {&(0x7f0000001540)=""/4096, 0x1003}], 0x2, 0x0, 0x600, 0x1003}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/37, 0x24}], 0x1, 0x0, 0x0, 0x7fffef92}}, {{&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/110, 0x6e}, {&(0x7f0000000340)=""/160, 0xfffffeaf}, {&(0x7f0000000080)=""/24, 0x18}], 0x3, &(0x7f0000000440)=""/182, 0xb6}}], 0x3, 0x0, 0x0) bind$alg(r0, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x0) 19:30:36 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:37 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f297c0eccf859705acf9834f5b4b6039b63eac610b", 0x15}, {&(0x7f0000001400)="c98812c1be8a", 0xffffffc8}, {&(0x7f00000012c0)="406f2bef596a8a3130012ee7bf", 0xd}, {&(0x7f0000001300)="7f5549f794326461", 0x8}], 0x4, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0xffffffffffffff5f, &(0x7f0000002600)=[{&(0x7f00000005c0)=""/120, 0x78}, {&(0x7f0000001540)=""/4096, 0x1003}], 0x2, 0x0, 0x600, 0x1003}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/37, 0x24}], 0x1, 0x0, 0x0, 0x7fffef92}}, {{&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/110, 0x6e}, {&(0x7f0000000340)=""/160, 0xfffffeaf}, {&(0x7f0000000080)=""/24, 0x18}], 0x3, &(0x7f0000000440)=""/182, 0xb6}}], 0x3, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)}, 0x0) 19:30:38 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) [ 1103.757032][ T26] kworker/dying (26) used greatest stack depth: 22048 bytes left 19:30:39 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:40 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:40 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:41 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:42 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:44 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:45 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:47 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:48 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:49 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:50 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f297c0eccf859705acf9834f5b4b6039b63eac610b", 0x15}, {&(0x7f0000001400)="c98812c1be8a", 0xffffffc8}, {&(0x7f00000012c0)="406f2bef596a8a3130012ee7bf", 0xd}, {&(0x7f0000001300)="7f5549f794326461", 0x8}], 0x4, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0xffffffffffffff5f, &(0x7f0000002600)=[{&(0x7f00000005c0)=""/120, 0x78}, {&(0x7f0000001540)=""/4096, 0x1003}], 0x2, 0x0, 0x600, 0x1003}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/37, 0x24}], 0x1, 0x0, 0x0, 0x7fffef92}}, {{&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/110, 0x6e}, {&(0x7f0000000340)=""/160, 0xfffffeaf}, {&(0x7f0000000080)=""/24, 0x18}], 0x3, &(0x7f0000000440)=""/182, 0xb6}}], 0x3, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x0) 19:30:51 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:52 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:53 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f297c0eccf859705acf9834f5b4b6039b63eac610b", 0x15}, {&(0x7f0000001400)="c98812c1be8a", 0xffffffc8}, {&(0x7f00000012c0)="406f2bef596a8a3130012ee7bf", 0xd}, {&(0x7f0000001300)="7f5549f794326461", 0x8}], 0x4, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0xffffffffffffff5f, &(0x7f0000002600)=[{&(0x7f00000005c0)=""/120, 0x78}, {&(0x7f0000001540)=""/4096, 0x1003}], 0x2, 0x0, 0x600, 0x1003}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/37, 0x24}], 0x1, 0x0, 0x0, 0x7fffef92}}, {{&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/110, 0x6e}, {&(0x7f0000000340)=""/160, 0xfffffeaf}, {&(0x7f0000000080)=""/24, 0x18}], 0x3, &(0x7f0000000440)=""/182, 0xb6}}], 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[@ip_ttl={{0x14}}], 0x18}, 0x0) 19:30:54 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:54 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) [ 1121.037357][ T1217] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.043732][ T1217] ieee802154 phy1 wpan1: encryption failed: -22 19:30:56 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:56 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:58 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:30:58 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f297c0eccf859705acf9834f5b4b6039b63eac610b", 0x15}, {&(0x7f0000001400)="c98812c1be8a", 0xffffffc8}, {&(0x7f00000012c0)="406f2bef596a8a3130012ee7bf", 0xd}, {&(0x7f0000001300)="7f5549f794326461", 0x8}], 0x4, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0xffffffffffffff5f, &(0x7f0000002600)=[{&(0x7f00000005c0)=""/120, 0x78}, {&(0x7f0000001540)=""/4096, 0x1003}], 0x2, 0x0, 0x600, 0x1003}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/37, 0x24}], 0x1, 0x0, 0x0, 0x7fffef92}}, {{&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/110, 0x6e}, {&(0x7f0000000340)=""/160, 0xfffffeaf}, {&(0x7f0000000080)=""/24, 0x18}], 0x3, &(0x7f0000000440)=""/182, 0xb6}}], 0x3, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440), 0x0) sendmsg$inet(r1, &(0x7f0000001b80)={0x0, 0x0, 0x0}, 0x0) 19:30:59 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:00 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:01 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:02 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:03 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:03 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f297c0eccf859705acf9834f5b4b6039b63eac610b", 0x15}, {&(0x7f0000001400)="c98812c1be8a", 0xffffffc8}, {&(0x7f00000012c0)="406f2bef596a8a3130012ee7bf", 0xd}, {&(0x7f0000001300)="7f5549f794326461", 0x8}], 0x4, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000002600)=[{0x0}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x1003}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/37, 0x25}], 0x1, 0x0, 0x0, 0x7fffef92}}, {{&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/110, 0x6e}, {&(0x7f0000000340)=""/160, 0xa0}, {&(0x7f0000000080)=""/24, 0x18}], 0x3, &(0x7f0000000440)=""/182, 0xb6}}], 0x3, 0x0, 0x0) bind$alg(r0, &(0x7f0000000700)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) sendmsg$inet(r1, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[@ip_ttl={{0x14}}], 0x18}, 0x0) 19:31:04 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:04 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:04 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:09 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:10 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:11 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:12 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:12 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:12 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:12 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f297c0eccf859705acf9834f5b4b6039b63eac610b", 0x15}, {&(0x7f0000001400)="c98812c1be8a", 0xffffffc8}, {&(0x7f00000012c0)="406f2bef596a8a3130012ee7bf", 0xd}, {&(0x7f0000001300)="7f5549f794326461", 0x8}], 0x4, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0xffffffffffffff5f, &(0x7f0000002600)=[{&(0x7f00000005c0)=""/120, 0x78}, {&(0x7f0000001540)=""/4096, 0x1003}], 0x2, 0x0, 0x600, 0x1003}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/37, 0x24}], 0x1, 0x0, 0x0, 0x7fffef92}}, {{&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/110, 0x6e}, {&(0x7f0000000340)=""/160, 0xfffffeaf}, {&(0x7f0000000080)=""/24, 0x18}], 0x3, &(0x7f0000000440)=""/182, 0xb6}}], 0x3, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440), 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[@ip_ttl={{0x14}}], 0x18}, 0x0) 19:31:13 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:18 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:19 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:20 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:20 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:21 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:22 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:24 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f297c0eccf859705acf9834f5b4b6039b63eac610b", 0x15}, {&(0x7f0000001400)="c98812c1be8a", 0xffffffc8}, {&(0x7f00000012c0)="406f2bef596a8a3130012ee7bf", 0xd}, {&(0x7f0000001300)="7f5549f794326461", 0x8}], 0x4, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f00000005c0)=""/120, 0x78}, {0x0}], 0x2, 0x0, 0x0, 0x1003}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/37, 0x25}], 0x1, 0x0, 0x0, 0x7fffef92}}, {{&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/110, 0x6e}, {&(0x7f0000000340)=""/160, 0xa0}, {&(0x7f0000000080)=""/24, 0x18}], 0x3, &(0x7f0000000440)=""/182, 0xb6}}], 0x3, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[@ip_ttl={{0x14}}], 0x18}, 0x0) 19:31:26 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f297c0eccf859705acf9834f5b4b6039b63eac610b", 0x15}, {&(0x7f0000001400)="c98812c1be8a", 0xffffffc8}, {&(0x7f00000012c0)="406f2bef596a8a3130012ee7bf", 0xd}, {&(0x7f0000001300)="7f5549f794326461", 0x8}], 0x4, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0xffffffffffffff5f, &(0x7f0000002600)=[{&(0x7f00000005c0)=""/120, 0x78}, {&(0x7f0000001540)=""/4096, 0x1003}], 0x2, 0x0, 0x600, 0x1003}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/37, 0x24}], 0x1, 0x0, 0x0, 0x7fffef92}}, {{&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/110, 0x6e}, {&(0x7f0000000340)=""/160, 0xfffffeaf}, {&(0x7f0000000080)=""/24, 0x18}], 0x3, &(0x7f0000000440)=""/182, 0xb6}}], 0x3, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440), 0x0) sendmsg$inet(r1, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[@ip_ttl={{0x14}}], 0x18}, 0x0) 19:31:26 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:27 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r2) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:27 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:27 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r2) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:28 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r2) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:28 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r2) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:28 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:29 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:29 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r2) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:31 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:31 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:31 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:31 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:31 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:32 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:32 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:32 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:32 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:32 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:32 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:39 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:40 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:40 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:40 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:41 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:41 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:41 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:42 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:43 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:45 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:46 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:46 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:48 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:48 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:48 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440), 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:50 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:50 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:50 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:50 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440), 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:50 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:50 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440), 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:51 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) [ 1182.476514][ T1217] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.482831][ T1217] ieee802154 phy1 wpan1: encryption failed: -22 19:31:58 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:58 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440), 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:58 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440), 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) 19:31:58 executing program 2: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0410096f7fad9b8713349a00603d312715a49bd0bbb9418debd6b095fb14419ec594d43919049622d031ecf0ef972351ea96c8a78c33b4390a7c8234eaad9f12f94f62cea932f700"/86], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x24000, 0x80) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f00000003c0)='erofs\x00', 0x0, &(0x7f0000000400)='/dev/fb0\x00') syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x10, 0x0, 0x300, 0x0, 0x4, 0x0, 0x0, 0x1, {}, {0x1, 0x4}, {0x5, 0x6ac, 0x1}, {0x10200, 0x4, 0x1}, 0x3, 0x0, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2c53, 0x0, 0xfffffffb, 0x3, 0x7, 0x0, 0x100, 0x2, 0x4}) syslog(0xa, &(0x7f0000000540)=""/142, 0x8e) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) unshare(0x40000200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{0x0, 0x78, 0x0, 0xffffffff00000001, 0x2, 0x4, 0x5, 0x99, 0x1f, 0x7, 0x80000001, 0x10001, 0x7a, 0xffffffffffffff74}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043080000000"], 0x6) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x50}}, 0x4) [ 1184.577064][T16164] ------------[ cut here ]------------ [ 1184.577237][T16164] WARNING: CPU: 1 PID: 16164 at drivers/gpu/drm/vkms/vkms_crtc.c:103 vkms_get_vblank_timestamp+0x1cf/0x240 [ 1184.577329][T16164] Modules linked in: [ 1184.577345][T16164] CPU: 1 PID: 16164 Comm: syz-executor.5 Not tainted 6.4.0-rc1-syzkaller-00177-gbb7c241fae62 #0 [ 1184.577396][T16164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 1184.577414][T16164] RIP: 0010:vkms_get_vblank_timestamp+0x1cf/0x240 [ 1184.577473][T16164] Code: b7 70 fc e8 33 c2 60 fc 4c 89 e1 48 ba 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 11 00 75 65 49 89 04 24 eb c4 e8 b1 b7 70 fc <0f> 0b eb bb e8 18 7d c3 fc e9 de fe ff ff e8 4e 7d c3 fc e9 78 fe [ 1184.577498][T16164] RSP: 0018:ffffc90003a2f3e0 EFLAGS: 00010212 [ 1184.577522][T16164] RAX: 00000000000018af RBX: 00000113cbccf844 RCX: ffffc90004974000 [ 1184.577541][T16164] RDX: 0000000000040000 RSI: ffffffff85138d2f RDI: 0000000000000006 [ 1184.577560][T16164] RBP: ffff88801f7d0000 R08: 0000000000000006 R09: 00000113cbccf844 [ 1184.577578][T16164] R10: 00000113cbccf844 R11: 0000000000000000 R12: ffffc90003a2f548 [ 1184.577596][T16164] R13: 00000113cbccf844 R14: 0000000000004e20 R15: ffffffff85138b60 [ 1184.577614][T16164] FS: 00007fa35bd1d700(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 1184.577641][T16164] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1184.577660][T16164] CR2: 0000000020045000 CR3: 00000000298b1000 CR4: 00000000003506e0 [ 1184.577678][T16164] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1184.577695][T16164] DR3: 000000000000003b DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1184.577712][T16164] Call Trace: [ 1184.577720][T16164] [ 1184.577734][T16164] drm_crtc_get_last_vbltimestamp+0x102/0x1a0 [ 1184.577782][T16164] ? __get_vblank_counter+0x410/0x410 [ 1184.577816][T16164] ? find_held_lock+0x2d/0x110 [ 1184.577872][T16164] drm_crtc_next_vblank_start+0x186/0x300 [ 1184.577907][T16164] drm_atomic_helper_wait_for_fences+0x1f3/0x840 [ 1184.577946][T16164] ? drm_atomic_helper_check+0x190/0x190 [ 1184.577984][T16164] ? ktime_get+0x38e/0x470 [ 1184.578017][T16164] ? ktime_get+0x30f/0x470 [ 1184.578058][T16164] commit_tail+0x85/0x420 [ 1184.578094][T16164] drm_atomic_helper_commit+0x2ef/0x370 [ 1184.578126][T16164] ? drm_atomic_helper_setup_commit+0x1770/0x1770 [ 1184.578160][T16164] drm_atomic_commit+0x20a/0x300 [ 1184.578197][T16164] ? drm_atomic_state_alloc+0x110/0x110 [ 1184.578228][T16164] ? __drm_printfn_seq_file+0x50/0x50 [ 1184.578272][T16164] ? drm_client_rotation+0x45b/0x730 [ 1184.578315][T16164] drm_client_modeset_commit_atomic+0x69b/0x7e0 [ 1184.578363][T16164] ? __mutex_lock+0x231/0x1350 [ 1184.578413][T16164] ? drm_client_rotation+0x730/0x730 [ 1184.578465][T16164] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 1184.578497][T16164] ? wait_for_completion_io_timeout+0x20/0x20 [ 1184.578542][T16164] drm_client_modeset_commit_locked+0x149/0x580 [ 1184.578587][T16164] drm_fb_helper_pan_display+0x28f/0x970 [ 1184.578632][T16164] fb_pan_display+0x2fb/0x6c0 [ 1184.578687][T16164] ? drm_fb_helper_fini+0x390/0x390 [ 1184.578720][T16164] fb_set_var+0x749/0x1090 [ 1184.578762][T16164] ? fb_blank+0x190/0x190 [ 1184.578799][T16164] ? lock_sync+0x190/0x190 [ 1184.578845][T16164] ? rcu_is_watching+0x12/0xb0 [ 1184.578886][T16164] ? trace_contention_end+0xd8/0x100 [ 1184.578916][T16164] ? __mutex_lock+0x231/0x1350 [ 1184.578966][T16164] ? _raw_spin_lock_irqsave+0x52/0x60 [ 1184.579043][T16164] ? is_console_locked+0x9/0x10 [ 1184.579075][T16164] ? fbcon_info_from_console+0x61/0x190 [ 1184.579104][T16164] ? fbcon_modechange_possible+0x35c/0x4c0 [ 1184.579140][T16164] do_fb_ioctl+0x6a0/0x750 [ 1184.579179][T16164] ? fb_getput_cmap+0x270/0x270 [ 1184.579216][T16164] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1184.579266][T16164] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1184.579315][T16164] ? do_vfs_ioctl+0x132/0x1670 [ 1184.579364][T16164] ? vfs_fileattr_set+0xc40/0xc40 [ 1184.579429][T16164] ? __fget_files+0x26a/0x480 [ 1184.579476][T16164] fb_ioctl+0xeb/0x150 [ 1184.579512][T16164] ? do_fb_ioctl+0x750/0x750 [ 1184.579550][T16164] __x64_sys_ioctl+0x197/0x210 [ 1184.579592][T16164] do_syscall_64+0x39/0xb0 [ 1184.579639][T16164] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1184.579700][T16164] RIP: 0033:0x7fa35b08c169 [ 1184.579722][T16164] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1184.579746][T16164] RSP: 002b:00007fa35bd1d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1184.579773][T16164] RAX: ffffffffffffffda RBX: 00007fa35b1ac050 RCX: 00007fa35b08c169 [ 1184.579791][T16164] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000007 [ 1184.579808][T16164] RBP: 00007fa35b0e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1184.579825][T16164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1184.579841][T16164] R13: 00007fa35b2cfb1f R14: 00007fa35bd1d300 R15: 0000000000022000 [ 1184.579875][T16164] [ 1184.579887][T16164] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1184.579896][T16164] CPU: 1 PID: 16164 Comm: syz-executor.5 Not tainted 6.4.0-rc1-syzkaller-00177-gbb7c241fae62 #0 [ 1184.579921][T16164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 1184.579934][T16164] Call Trace: [ 1184.579939][T16164] [ 1184.579947][T16164] dump_stack_lvl+0xd9/0x150 [ 1184.580018][T16164] panic+0x686/0x730 [ 1184.580056][T16164] ? panic_smp_self_stop+0xa0/0xa0 [ 1184.580091][T16164] ? show_trace_log_lvl+0x285/0x390 [ 1184.580149][T16164] ? vkms_get_vblank_timestamp+0x1cf/0x240 [ 1184.580186][T16164] check_panic_on_warn+0xb1/0xc0 [ 1184.580223][T16164] __warn+0xf2/0x390 [ 1184.580257][T16164] ? vkms_get_vblank_timestamp+0x1cf/0x240 [ 1184.580293][T16164] report_bug+0x2da/0x500 [ 1184.580336][T16164] handle_bug+0x3c/0x70 [ 1184.580356][T16164] exc_invalid_op+0x18/0x50 [ 1184.580378][T16164] asm_exc_invalid_op+0x1a/0x20 [ 1184.580427][T16164] RIP: 0010:vkms_get_vblank_timestamp+0x1cf/0x240 [ 1184.580463][T16164] Code: b7 70 fc e8 33 c2 60 fc 4c 89 e1 48 ba 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 11 00 75 65 49 89 04 24 eb c4 e8 b1 b7 70 fc <0f> 0b eb bb e8 18 7d c3 fc e9 de fe ff ff e8 4e 7d c3 fc e9 78 fe [ 1184.580485][T16164] RSP: 0018:ffffc90003a2f3e0 EFLAGS: 00010212 [ 1184.580503][T16164] RAX: 00000000000018af RBX: 00000113cbccf844 RCX: ffffc90004974000 [ 1184.580518][T16164] RDX: 0000000000040000 RSI: ffffffff85138d2f RDI: 0000000000000006 [ 1184.580534][T16164] RBP: ffff88801f7d0000 R08: 0000000000000006 R09: 00000113cbccf844 [ 1184.580549][T16164] R10: 00000113cbccf844 R11: 0000000000000000 R12: ffffc90003a2f548 [ 1184.580564][T16164] R13: 00000113cbccf844 R14: 0000000000004e20 R15: ffffffff85138b60 [ 1184.580579][T16164] ? vkms_crtc_atomic_flush+0x2b0/0x2b0 [ 1184.580621][T16164] ? vkms_get_vblank_timestamp+0x1cf/0x240 [ 1184.580664][T16164] drm_crtc_get_last_vbltimestamp+0x102/0x1a0 [ 1184.580695][T16164] ? __get_vblank_counter+0x410/0x410 [ 1184.580725][T16164] ? find_held_lock+0x2d/0x110 [ 1184.580758][T16164] drm_crtc_next_vblank_start+0x186/0x300 [ 1184.580788][T16164] drm_atomic_helper_wait_for_fences+0x1f3/0x840 [ 1184.580824][T16164] ? drm_atomic_helper_check+0x190/0x190 [ 1184.580852][T16164] ? ktime_get+0x38e/0x470 [ 1184.580881][T16164] ? ktime_get+0x30f/0x470 [ 1184.580917][T16164] commit_tail+0x85/0x420 [ 1184.580950][T16164] drm_atomic_helper_commit+0x2ef/0x370 [ 1184.580983][T16164] ? drm_atomic_helper_setup_commit+0x1770/0x1770 [ 1184.581015][T16164] drm_atomic_commit+0x20a/0x300 [ 1184.581043][T16164] ? drm_atomic_state_alloc+0x110/0x110 [ 1184.581072][T16164] ? __drm_printfn_seq_file+0x50/0x50 [ 1184.581111][T16164] ? drm_client_rotation+0x45b/0x730 [ 1184.581166][T16164] drm_client_modeset_commit_atomic+0x69b/0x7e0 [ 1184.581229][T16164] ? __mutex_lock+0x231/0x1350 [ 1184.581257][T16164] ? drm_client_rotation+0x730/0x730 [ 1184.581306][T16164] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 1184.581336][T16164] ? wait_for_completion_io_timeout+0x20/0x20 [ 1184.581377][T16164] drm_client_modeset_commit_locked+0x149/0x580 [ 1184.581419][T16164] drm_fb_helper_pan_display+0x28f/0x970 [ 1184.581460][T16164] fb_pan_display+0x2fb/0x6c0 [ 1184.581495][T16164] ? drm_fb_helper_fini+0x390/0x390 [ 1184.581528][T16164] fb_set_var+0x749/0x1090 [ 1184.581568][T16164] ? fb_blank+0x190/0x190 [ 1184.581604][T16164] ? lock_sync+0x190/0x190 [ 1184.581649][T16164] ? rcu_is_watching+0x12/0xb0 [ 1184.581689][T16164] ? trace_contention_end+0xd8/0x100 [ 1184.581717][T16164] ? __mutex_lock+0x231/0x1350 [ 1184.581762][T16164] ? _raw_spin_lock_irqsave+0x52/0x60 [ 1184.581798][T16164] ? is_console_locked+0x9/0x10 [ 1184.581829][T16164] ? fbcon_info_from_console+0x61/0x190 [ 1184.581856][T16164] ? fbcon_modechange_possible+0x35c/0x4c0 [ 1184.581890][T16164] do_fb_ioctl+0x6a0/0x750 [ 1184.581928][T16164] ? fb_getput_cmap+0x270/0x270 [ 1184.581970][T16164] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1184.582004][T16164] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1184.582042][T16164] ? do_vfs_ioctl+0x132/0x1670 [ 1184.582099][T16164] ? vfs_fileattr_set+0xc40/0xc40 [ 1184.582163][T16164] ? __fget_files+0x26a/0x480 [ 1184.582209][T16164] fb_ioctl+0xeb/0x150 [ 1184.582243][T16164] ? do_fb_ioctl+0x750/0x750 [ 1184.582280][T16164] __x64_sys_ioctl+0x197/0x210 [ 1184.582332][T16164] do_syscall_64+0x39/0xb0 [ 1184.582371][T16164] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1184.582407][T16164] RIP: 0033:0x7fa35b08c169 [ 1184.582424][T16164] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1184.582446][T16164] RSP: 002b:00007fa35bd1d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1184.582468][T16164] RAX: ffffffffffffffda RBX: 00007fa35b1ac050 RCX: 00007fa35b08c169 [ 1184.582483][T16164] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000007 [ 1184.582498][T16164] RBP: 00007fa35b0e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1184.582512][T16164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1184.582526][T16164] R13: 00007fa35b2cfb1f R14: 00007fa35bd1d300 R15: 0000000000022000 [ 1184.582557][T16164] [ 1184.582821][T16164] Kernel Offset: disabled [ 1185.546946][T16164] Rebooting in 86400 seconds..