m={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)

09:24:14 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000600), 0x10)
bind$can_raw(r0, &(0x7f0000000080), 0x10)

09:24:14 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000)=0x1, 0x4)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$rds(r0, &(0x7f0000000580)={&(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)=""/161, 0xa1}], 0x1, &(0x7f0000001740)=[@fadd={0x58, 0x114, 0x6, {{0x1f, 0x858}, &(0x7f0000000380)=0x3, &(0x7f00000003c0)=0x7, 0x2, 0x7ff, 0x3, 0x6, 0x24, 0xffffffffffff0001}}, @cswp={0x58, 0x114, 0x7, {{0x6, 0x4}, &(0x7f0000000400)=0x7, &(0x7f0000000440)=0xfffffffffffffffc, 0x7f, 0x8001, 0x2, 0x9, 0x70, 0x3}}, @mask_fadd={0x58, 0x114, 0x8, {{0x5, 0x95}, &(0x7f0000000480)=0x9, &(0x7f00000004c0)=0x4, 0x7, 0x100000000, 0x2, 0xfffffffffffffe00, 0x4, 0x5}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000640)=""/4096, 0x1000}, &(0x7f0000000500)}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001640)=""/194, 0xc2}, &(0x7f0000000540), 0xa}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xffffffd3}], 0x180, 0x4000000}, 0x4000)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000180), &(0x7f00000001c0))

09:24:14 executing program 3:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

09:24:14 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0)
ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000040))

09:24:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)

09:24:14 executing program 5:
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000380)={&(0x7f0000ffd000/0x2000)=nil, 0x2000})
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x9810404e}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xbc, 0x0, 0x300, 0x70bd29, 0x31f, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xd2a1}, {0x6, 0x11, 0x8d69}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x400c040)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000001a80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a40)={&(0x7f0000000440)={0xc8, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40000000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xdf0a}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40041}, 0x20080)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

09:24:14 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000600), 0x10)
bind$can_raw(r0, &(0x7f0000000080), 0x10)

09:24:14 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000)=0x1, 0x4)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180), &(0x7f00000001c0))

09:24:14 executing program 3:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

09:24:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)

09:24:14 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0)

09:24:14 executing program 5:
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000380)={&(0x7f0000ffd000/0x2000)=nil, 0x2000})
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x9810404e}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xbc, 0x0, 0x300, 0x70bd29, 0x31f, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xd2a1}, {0x6, 0x11, 0x8d69}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x400c040)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000001a80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a40)={&(0x7f0000000440)={0xc8, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40000000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xdf0a}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40041}, 0x20080)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

09:24:14 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, 0x0, 0x0)
bind$can_raw(r0, &(0x7f0000000080), 0x10)

09:24:14 executing program 3:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

09:24:14 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000)=0x1, 0x4)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180), &(0x7f00000001c0))

09:24:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)

09:24:14 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0)

09:24:14 executing program 5:
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000380)={&(0x7f0000ffd000/0x2000)=nil, 0x2000})
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x9810404e}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xbc, 0x0, 0x300, 0x70bd29, 0x31f, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xd2a1}, {0x6, 0x11, 0x8d69}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x400c040)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000001a80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a40)={&(0x7f0000000440)={0xc8, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40000000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xdf0a}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40041}, 0x20080)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

09:24:14 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000)=0x1, 0x4)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180), &(0x7f00000001c0))

09:24:14 executing program 3:
syz_mount_image$efs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x9, 0x5, &(0x7f0000000300)=[{&(0x7f0000000080), 0x0, 0x80000001}, {&(0x7f00000000c0)="9278814e35c204fe1eee6cfb72967f73e2cb7806cf3b0595470570d5", 0x1c, 0xffffffffffffff81}, {&(0x7f0000000100)="ce76e80cca61b3cc614b24e19148ab4954d4e030b137086a17aa923d59ccbfe1c2550164cab527065596c2d47c569100a4eacf3e9046c0815aa08ad512f9f6aaebda82a05bd9ec24fbb1b4d08d3db2738edc4af2002a5d1cee", 0x59, 0x8}, {&(0x7f0000000180)="6b8b9ea6d058b1756f0d94dcb744e6afd8cdba1e95ecae1ec6744c954e363c76fba97ac4da7c1a651424a4f9f9d3f7fce5b15f032c2532fc194f0ae37b8165df610c571d388be9d242f19b6e4c0fb5e16fc5e0334bf240f5513b351a33095033d8533f1d45bd61847cb26b0d3e85dc75973ccca48c", 0x75, 0x7}, {&(0x7f0000000200)="656722e68c96383786f0852f7dc82c80cb21fd4a13efffba68345b72f3fd9fb975fdbfb8af9351d791fb8686739b59eb25806bce6d28bcb425cd996e9a578972afcd2f76e47484f5f3af573d1dde4583624369cde9081544095987cb835ae559f361cbe74babe75b666c4733293a5ad77cf343ae55302501f1a697445f722b688cc32443e4b6445afa4ad93e653b3085a037fe1f995f8ee7047ea300c3d9f613ad3db33b6ccdde4bd8f270be5a429607a7f6e8c936618b9f3dfbbf5acc3fa6323af528f3e6ad001b3acf9386e11f18af669edd11d10fd07d374f49e03011c9e0ddd2df7bc97b64f9de27aa962580ba7dd25956bdcc", 0xf5, 0x6}], 0x16040, &(0x7f0000000380)={[{}, {'#+'}], [{@dont_hash}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@euid_lt}]})

09:24:14 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, 0x0, 0x0)
bind$can_raw(r0, &(0x7f0000000080), 0x10)

09:24:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)

09:24:14 executing program 5:
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000380)={&(0x7f0000ffd000/0x2000)=nil, 0x2000})
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x9810404e}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xbc, 0x0, 0x300, 0x70bd29, 0x31f, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xd2a1}, {0x6, 0x11, 0x8d69}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x400c040)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000001a80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a40)={&(0x7f0000000440)={0xc8, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40000000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xdf0a}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40041}, 0x20080)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

09:24:15 executing program 0:
openat$vcsa(0xffffffffffffff9c, 0x0, 0xc0100, 0x0)

09:24:15 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, 0x0, 0x0)
bind$can_raw(r0, &(0x7f0000000080), 0x10)

09:24:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)

[  915.254664][ T2985] loop3: detected capacity change from 0 to 264192
09:24:15 executing program 3:
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
r4 = syz_io_uring_complete(r1)
syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
recvmsg$can_j1939(r4, &(0x7f0000002040)={&(0x7f0000000c00)=@phonet, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000c80)=""/41, 0x29}, {&(0x7f0000000cc0)=""/170, 0xaa}, {&(0x7f0000000d80)=""/94, 0x5e}, {&(0x7f0000000e00)=""/234, 0xea}], 0x4, &(0x7f0000001f40)=""/208, 0xd0}, 0x2040)
io_uring_setup(0x969, &(0x7f0000000700)={0x0, 0xb8b0, 0x8, 0x3, 0x3b})
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x10000000)
r5 = syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x7, 0xa, &(0x7f0000000600)=[{&(0x7f0000000080)="79ad56a7", 0x4, 0x5c5a5f72}, {&(0x7f00000000c0)="fb4ee6fa1c6368338f7c56051b713d4a23b9401e54a585e9dace95f60fe6eb91cdc63eefc4fa68f5e7e24db0cfad7bb87ed84734c3fb71b611997ac778d158f1fcdfd851f51e726cf95bf162ff7e3f3af3f559efa9bb83df27a59a5434313df7dcbabe8a06fe7d0853388b991dd7ca6e11fdb6baf0b0b4198e96931120ebcf442fb531d96ff9a88c5c18954b84dbbedacd19160ae6a613610b7da7ee36dcc6ce29d6d9b61be36a36004e9047a43ecac50f9a88f7fc5815bb94f1922d086a9d1110154f46234044d4702230fb528eb1acd798f3b9b73cdf7b0f6f8ece057aab2804d5ea327d778f9c", 0xe8, 0x4}, {&(0x7f0000000200)="9b5964b561c06a8cd6ea24ffdbf9a580a737ad000aec0d448c6c9a670a1a63f1688ff5fb6728dbea0caeb1127fdd0613c288a48b2b0651441612da738a05fe1e940f8fb371b5a91595085023781aafe25852299a5fcb7fe23993bf9a28fd08e4d98d39672ecc29e10a9926ea60ca5caeab4214408115c6bfbea391daffc39db0cf2d462dba1367528eff24156c8bbaa42a3b2535c6b79073168b7f38162c12a7bc8628d4c6d7525b1d7e17eec98b7f9f994eada8a6aad12635123a4cd4d67729c014beaad783ce27d71c0f3bba9af616ef02f2f75c6531bf6bcce890e05f8b5c2e9167f757d2853c5e", 0xe9, 0x7}, {&(0x7f0000000300)="f24be30e340715c3e490ed0156f3c735f052ad58b35876088300342a17dc88cf6ca347b068350775991c88e9c04725", 0x2f, 0x22bb}, {&(0x7f0000000340)="ac207b7b07fcce5073734ac4fa65373937596984f34aa4cfa0f4096cba6ab664702d80ea15137716fddf8716a8a2058f23d02a1918e9e6d1ff7f4103c4db2735c4a5cc0b18f1df2774338391355c7087f02c05d207a6d264833294269ab0998c3988eae5ae2e7d966c36f2b47b5c39714cd4e51a077322038359f9c2294784af0647b0e78404a49b5e7acae449be55797079ed48caba938fa79c52612eb04edbad8f8106146e057ad349b0d501d77a10a8a95892656427edb9ace70c194b4d015ffab0cb2ecf8ce4c34066517b1199764a6c1d4c5ca1fd0b62edf5da1a77ce6238db3833ba965ec62c637496c2ac09d1917bcf55a64ede07", 0xf8, 0x8}, {&(0x7f0000000440)="8bafb6f22ae5378f2cbd", 0xa, 0xfe0000000000}, {&(0x7f0000000480)="2db3d367442c2a87a475", 0xa, 0xfffffffffffffffa}, {&(0x7f00000004c0)="4e7ab9d37181fb576fadfadc72c6d4b16cdbcb5ea0f2a37f8c2a8e", 0x1b, 0x3}, {&(0x7f0000000500)="d2096c4f485047c29dcfc02ffc8181d423dc5c5f7c410a229a700a0ce5ca2f76efae38e66bb0c27400c38de803423e0d49ddeb9cc910648994c5ef94fc60c54b9de22578a462db444a2f45b8cc5d92dd028c47f3c654587c63d1444af675fda7d028b11820ec53dfb5ac521eb6e49c4ca88d5c172890d79e251435133690a04d22806478802fd7cd397526c273eb55b5b88917b9", 0x94, 0x110000000}, {&(0x7f00000005c0)}], 0x2000000, &(0x7f00000009c0)=ANY=[@ANYBLOB="292f2c2325962d7d252c2f64c1577f65762f5f637361002c2c5d25402e2d2c5c29212e5b345b2626262e2c3a7d2c646566636f6e746578743dd874620124730a2f3d865973797374656d5f75290859f48940777634b5d02c736d61636b66736465663d2f646586b430836e617702762f76637361002c736d61636b6673726f6f743d2c7065726d69745f646970656374696f2c751b000000000000c51e62f47e6721d9e81b38aa71c265de7c2a94830b7de795bc00800000000000004d14f88c378966c18d4207682536e6a2da362b62a56a524eb819eb3e3ee052b4bc78e89a604703ed959350e920a7675f4a744881f137f6e06a72c84bcb067a2b26deddebc05c682b6b1128739d56d9e82519a50453a3dc7a9c5337542656bff81f8bb3cb2fe1e3ea4fc9aabaae9d0cc3390178f2d7d086f879140ccbe1a68be16015ec009cf164148ecf2fa3c9b116d462135a1ef36c7c1dd3d299c9e1df6b3d31549f42229a4cef8faf2f6796599e478bc1885eac5d0995157697f966e4dbe1830140efd5000006d711bc89cb420de3905c987bb6a88e55b33fced29d036242ff024788a2d8c0cec40496a265a720c80fddc3aa1ce2592f342bd5aee00e7ecd13dd", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d2f6465762f76637361002c6f626a5f747970653d2f6465762f76637361002c736d61636b6673666c6f6f723d2c736d61636b6673666c6f6f723d2f6465762f76636361002c7c4662d6e9b79d3d1300"])
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r5, 0x0, &(0x7f0000000840)='./file0\x00', 0x1, 0x220400, 0x23456}, 0x2)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
r7 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0xffffffff, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r8=>0x0, &(0x7f00000000c0))
bind$can_raw(r6, &(0x7f0000002080), 0x10)
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r7, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r7}, 0x93)
syz_io_uring_complete(r8)
syz_mount_image$ubifs(&(0x7f0000000780), &(0x7f00000007c0)='./file0\x00', 0x1, 0x1, &(0x7f0000000800)=[{&(0x7f0000000f00)="aa4d3a9dd379aeb0cb13b1f0aac34a059cdc12bfd0fafe9985109dc82d95da0174db88604654c96b1d0fcf10700febb5e8b4873b344047b74cd58e60050f5ef4c66b911a28de76bb8d1b12d500bb0e44e8462d57978175ec9dfd24c330374e9cad6379164bdbb535ff6d9fee88c2cd6e201accdeb0dcc2bf56e7b657f93484b0bb166c1f1dbfd8de2b511f6027e6d504a8a3ca7abaca5fb5ae1124e6fd7a7730a6f932d06fc313b3976779a7c22f9f513f454fe854b03726d116387b0c8a66c76453c3f1f079f4866a93c4de5b12e1a46c58b911dbe3b4f7bc7a2f230220c4bc5a98e78b854e872759510c2b0e1a4f109e9e9efaac14f8f939bc07e1af3b6af1a5b7fef72dc96f33ef7135c6413c0cc98fe5a87de6ad61d4ca70170593863e61505eab22cfe44281eeee67c263ba5873143fd5b7e76be34233be87d3dfa93d1af08343bcabe0857f957756374372f5f8b321c406d3db53ffd2ad5bdc041207c9417474a7a88c0b0a30293ee8a99e6d5a8586501001ae7ae1d34c12d0f35556b55ebb64f6eb0a7eebc8afdb3f9871abb9668b95e1f38c5c2b1680787520200560b773d3ac5da51a296069bfc1f2c1b379a999d10356673c27bf62482033a48fb43e3fe1414c693f075674dfea915bcd79218246306e0d4dc71f3474a44999443543ae7b535dcb736326231188c14aab8544b84444c0bcbb5b1df5965435a32fc6a7980483d68d98fa39299108e1b5127bad2f8241051159cbcb6b27dd5496ef4c976183abdf28ad641b5213efc5624b43f8f2c3534398f31f44980a491b92ee8448c31fe335b57ec16d29ac66d4a6e3e4f07414b60a6553f78246971f4ec736a046eebf977f828b1e12839d05a04f17a4a5543445a2a625901bcdf16c7e84a0e1350de79764ca1a98f1a35c83e0df0a3f69e6f7983632c2cbc1560fe14ff6667224f7a5bdbf6948ea47285578312f64eea6e4cb6a2ed291b827842cf0f8405d61dd23b01cde0c9d3c955f51d1e30013b0cf0a1d921d0e2895ee0cccd91f160b88908da264f047ec79193e959c8a1e9dedd90e28351ebd8122744a090e02387b527f7789b308d36f53c2979c5984d4f56e0cf78058340eb4691072a49d93487d77ce712073bbf997c45f904983f0353b5ba551725f8f932069de4a7515108a1ea5dbdf7e49a1cac04c7050c418636ba38d22e7becbf82daeb87d740b5ba23f98899bef6b42807a984368b70cd85b5a91c585ef6ba545e157558f2a88318bdfb1680251760429e428147e828f5427d7f7b5200bc5cf02480d4d5679763c2c1ef9fac3aca3a279bcb15743178d525444ef1a93e8fe799813691a97a3055a8a38f8a6631b8c73f739ddc1e1666dd68e659be2e72d33b1ca58ee7188a73045263ab5716b3301099d9cfaf144ca4b644bcacf7214256f95f14d7303f991b4b6bc907e5460acba86da39e6e18b340bfccfb6b124eb507bdf1b44fb2fb60bb8cffe138933aeed39ccc273150adeef5c36f960c29ffa14a28f8109c1b6f9d334931c356b7e0a20a4cf2a02f7468df0d33660bb0f635e1f243f065d26de4107a5fabc93324a25266b95599027e8e10f7ded11b4ba46b81e307153da4564af9095606f4ba72826089a4bcef24572a7a21a4e93d722a95ac6a4b99d1d036cad89cbabe7155b407940effa84810a7a7703df4be31002e96fd762ad08ccb3339dda37db1a8ae4360853807dfc24327c9d35a8a6aaa2dc9efb98602e1a1dcaf88fd3d2eb5a2f47d1f0cfc4987be4f1e014e52b102431791f5863cc373b5f68bb4754ab9b5bb13cf369bae32fff3937bb2c4f09e5e5207e25392c17e9596cf10d66b824033c2c178e489b6c59ecb881908f08dd9bd012c3583ecc8057dbea090316abc97b4c04e9522d9d7992d66e82daf48f6fbfb1b922458d3356c38cac256b9197fed56fdc0d8edbe7d32c1375b1e876de6129cfb1023e42a57f9fa30efa375a86ad10358e2c88b8d992ec6bea9ea5f5f9138596aaa74c7a99672adfee5c24bd1db82ad8b27dfd89d91046845d6973bd71a22e178aa27d27370ce728333987ee835f818a7b9a9ed8da19e327a1101bebaab39336ab4f6a2573f8c65f537ac1a6256634855b0adeef729d8a124231497a1e27f9c351e467dcb59ec6e1883247598b22572e1e2c3ccbfb0645f3edb7abd3d4a7ffdf4acbd0dc67337b426953ce5e32a9941ddec7e140c6a00f22362dd273d38eb369d80fffbc7b4c37b2db290938bf4d03d686832f8b3fd51df3d5dc4dcd620f15451b76fd779c326adf49727b6ba8452b4f300e82f248b930fc738db0a09c93ce8b2101f8df56c7ee700ea568f42ead603d58e5b02c7b724112b918d927b7bca671f82d279d5a6814f52ca198782a8c2fba0229b26c1e69922dd635e914905319e6e715db1dad1816a3aa3cab7b636c5fc149d5c8a493cc6578501b1b976c70703645c152bd094c6cbd6d06c0ac800b22deddd47673c0bfc6b8a5c62264c173f90ba80565a4942c3aa715afded245ca0f0f1e915da8ccb02348eb02aa4a39d7056831089b142ea80e12a72155860ab0c189c480d4235de52fa074e5f00406d85337f97cc379a1f4ba2ced2ebda546bfe8e2b0a9ffce8014c71ca3bb3eef64d072354fa5db935877117c5c9123a279fd6bc6820fe0b85bcb32a317049eca758e2b4cce5648af0931139ded80f468c4a0d0fba3b049944bb0b4a7f29f3470d2ca7d7201b0247cacd24d2c1cbd2f84f13208ab5a4a5bc416ed3f8277069527e8e93ee9dd47b6e5c3e2f53f5242c6801366c3f5f376f1c2f1d92b8b5593b289dd8c3b10c388176d23327074728775a1447ca5ff63cd792c4ff5b7575c12fbb9bf06a2cc862a4e0fdbea9eb514ca833f1deb4bab88a68e3fb4dab09811896d507574e199b29cb995b4b3d8568273f12da9bb628002d0e1762e11d0b023c30cff399de66cd92fa6471c2345831a358c166a3a5eaf42d76c35172c06fd5d36a9dccd40823ac71885b46d47f5504feb14c911bbff91618c70d7999e6afe340865f84979ddb69252ec47ebd60d9bf7e562d1740aab0914b0960e4f185449cbc0f4c7f7770aa80aa26cc5e083628fd1fbd8f3bdd5a004f6313c6452c9c62308698b92940678242258c2f7f681cd88f4f3713e6d14396ef75f3afe9ff4de69cc02e26313e1f2e4f6ec55478ae04a3a30bd88e1373dca94f674b492e06545298c4baf2c5eeaed9e2d8a6bd49563ebe3f8f48b2646efc1a4f638966d786e1774eafede149337d233c163c33b57ca7e5bd4bd05d0bcd4362a6e7a404d621a2c28729d0a5d9d1af2a742558deac29acf3db7e36f8d0a5c7cc4414fa26607e3dbea493c9a4d8a644606b4a77c016151d41bad3c09efa6dc50a1cc25c05265918fe053f9364ea016243099fda19f7fa8b01220898e70a80a03a1366676492d1b768180e7ea69a9c741a486d72a38020a45417888663b87e05aba510971edd9a89f064b0fea3cc3300bf0a9d2c495db634622b52c0c0490ffcdfa3402101dc32925e48d93bee7cc986107c4400f4330b291cceac06ba603e4dc95954080a1f83e873cd9652d5aabb5afcb451af161652d9261e7bcd0a15f679548e8884e82c2d4e663e98e1c731084d89eecac1e5a4f6ead69b7b07ef27b562cc6aab226b5158356d3ef8646e25cf8e5fab386e8647fd28e9eb0e83f4eda431a5575bc81dde079f22b50b39d2e94ad2902ee905f7e50a598f0b4cd7bb839d60fceac43e731db12e9e6a51a8c7e638776023e85ba75063de712534527e009039626007a73cfb14f59d4d52d89c80d8f77dcd0ddae926c729e91b70dfe54a30777837cf30c41650908a3772164347c0a1a22d3d7bede34cff8eff260d9fbf8c2c16d7d1aa95e3346627b2a1a24557d6db55f4d204afcf4d0c41ccaf06432f178a275b85b4e5e5c84fc5c8cdf88621e0e8ce638010561245bce5838b258eb304cb9a5fd827e432b2c519acb724e64a7d88bb8a0ab8045038f5ddb565bcd898749f3d0fe26abbe4e2dd77a6c991492d36d3b23b2fffab19560be879178677e1f278cdb6e6818c8cac5fc1aea60149d39c7e147e0e0901740cc5ceb20dbd9e41e56511f3b85fdd7ec671a82ef93e10eef0b09d132707f3ffc5a6dbea3aaea495399b2e57c7fd21d8f32665ab05ea2c5fafbaad97c8e653669808d10b744ba94258a54b92c7343b575485ce7cd525a88b8e90e2b2bf9f46e923925b5df81100a11ccace64794292370c4b04ce928ae7a121cf35a6a1eba2807e4588205b98acd60800fecc6c36977186b524504b4590efa321c294de2945169a2c675e4f31a0f4279c8def0a9efdf09c461196823ee1c1b3c3d6377c1175aa6724e06c7d877de6374d3bfbab1c8436f2874ea6e14429a22e951b8110d6adb71dffac13bd7401776b003d06333a0f2ef1c9c98ecbed21333cff2d1f65fc97ef65c27e3d7ba017405cf0fcad02f6253eb272f45793c4ee968f7f43ecc59df4c4699d1d1336d855d651cd1b383592594c2532d5d45ea8c47413894656b65e452f01dd11742efad7d0914501f95fe6b46af5cabddc355734f414e8d42498bf1935b0d3910b4490a945ec8b8ba6f122ad0807c20cacf6cff749287cfea6c01092f6158d704911008b77da943f4d5deed6b7860b82daf8e82985dd85de0c97555d6e9b6fc09520209fd1671b6991d5a23fa5a71453d974927971a5d9b9cb5af8824af02b35479411fe7dfdda9bb7d20204aa008ed7921eb2df44c19d420e004aebd1333443edbd3473312c55f09145f6cc7606d3b86a1c33a5e2602973cd26995c54ebd75d54a45aa0360ec74f05375a2f5aa48f7f256251fa94c9087b075507466e2480285a146c6d6335cc7f36478182d7a1d133e6a47ff59cba03f84b37e0abaf581dabfd5ad68ac6ece1402cd842dae18ec38bb77578de644eb5c31002615ac120c47cbb89c3991a5936ec9c74663ddfb769028a39658fa9f689aea2bee51272aee3ac374bab6530e456c4c693f1f9961c8b2876234d603b22782bf823b1457ec06706f716a23a723b19189530c2bcb1e469eca5bad8ac2e6249de29212c8b6337f2724bea8543863c644e231dfd3f8e95f4e9c7c27bb3104d23714d93749272ef88bf233acb98e755b059be44a7cc628657949f334e141662feeaceca8b0d66926e3207abbd37dd7eee087e6c1489e8aafd6ddf83961c63f9d4fecb16bcf4967f94ebfcacd04831e1f5042623e93e48f5733709ae3e1e9bf8414d801cf54890c74df4f16aa5f7509cf70a3b85471f9d79219c77da8c09b7b619f0a629702230b3fd00f7679cb92b654b52c60627900d34252c1080785a28899d13a23a793a977cd47c49529f4bd16711c1d445083147a584b80ad0101f78ba2aad7b14e920fb732dff4770fb1df18034718bdee81c4b497e433c5e4b965f6b0f3db1545a087d8585653136641e98b9edf0df4bde249325449f691be1ce6c033b0b0e43a0e3450c063e0ad85df38da47c70df3c7a3c287e7253a81b5441666d33bcf113a20657d256fcc4bfd31f7b31dc80b070fa20a47ae647a6aa153eeda738b96366ee5f8a13d03501e172041a3e958cd0dd2b56f52547370aaf8c2509cf240314611fba717d4960e43e117f3ae1e8e28386d96b4f748fb801250098578a00b420c4d19bfb74c67630d28ac2088f051f37f058cad6c03322735962218233e052b7dd5c95c49d5c8f308cedeb9fe508d36b23bd40ec68b0bb20b9582bf5d56f6cf9c4e0b78955517212d16ad6fc69fa5785bdefd", 0x1000, 0xffff}], 0x3002000, &(0x7f00000008c0)={[{@no_chk_data_crc}, {@bulk_read}, {@bulk_read}, {}, {@compr_lzo}, {@compr_zlib}, {@auth_hash_name={'auth_hash_name', 0x3d, 'ghash'}}, {@compr_zlib}], [{@fsuuid={'fsuuid', 0x3d, {[0x61, 0x64, 0x65, 0x61, 0x61, 0xf685cf03a4f23002, 0x37, 0x38], 0x2d, [0x39, 0x66, 0x37, 0x37], 0x2d, [0x62, 0x63, 0x39, 0x63], 0x2d, [0x35, 0x39, 0x34, 0x35], 0x2d, [0x66, 0x39, 0x56, 0x34, 0x39, 0x65, 0x61, 0x66]}}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@dont_appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, '#-%//'}}, {@hash}, {@fsname={'fsname', 0x3d, '/dev/vcsa\x00'}}, {@uid_lt}]})
setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x114, &(0x7f00000005c0)=0xfffffff9, 0x0, 0x4)

09:24:15 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180), &(0x7f00000001c0))

09:24:15 executing program 5:
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000380)={&(0x7f0000ffd000/0x2000)=nil, 0x2000})
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x9810404e}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xbc, 0x0, 0x300, 0x70bd29, 0x31f, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xd2a1}, {0x6, 0x11, 0x8d69}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x400c040)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000001a80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a40)={&(0x7f0000000440)={0xc8, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40000000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xdf0a}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40041}, 0x20080)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

09:24:15 executing program 0:
openat$vcsa(0xffffffffffffff9c, 0x0, 0xc0100, 0x0)

09:24:15 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000600), 0x10)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10)

09:24:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)

09:24:15 executing program 2:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180), &(0x7f00000001c0))

09:24:15 executing program 5:
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000380)={&(0x7f0000ffd000/0x2000)=nil, 0x2000})
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x9810404e}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xbc, 0x0, 0x300, 0x70bd29, 0x31f, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xd2a1}, {0x6, 0x11, 0x8d69}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x400c040)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

[  915.521859][ T3012] loop3: detected capacity change from 0 to 264192
09:24:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)

09:24:15 executing program 2:
socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180), &(0x7f00000001c0))

[  915.605204][ T3012] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=4e000000)
09:24:15 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000600), 0x10)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10)

09:24:15 executing program 0:
openat$vcsa(0xffffffffffffff9c, 0x0, 0xc0100, 0x0)

[  915.711393][ T3031] loop3: detected capacity change from 0 to 255
09:24:15 executing program 2:
socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180), &(0x7f00000001c0))

09:24:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, 0x0, 0x0)

09:24:15 executing program 5:
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000380)={&(0x7f0000ffd000/0x2000)=nil, 0x2000})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

09:24:15 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000600), 0x10)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10)

09:24:15 executing program 3:
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
r4 = syz_io_uring_complete(r1)
syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
recvmsg$can_j1939(r4, &(0x7f0000002040)={&(0x7f0000000c00)=@phonet, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000c80)=""/41, 0x29}, {&(0x7f0000000cc0)=""/170, 0xaa}, {&(0x7f0000000d80)=""/94, 0x5e}, {&(0x7f0000000e00)=""/234, 0xea}], 0x4, &(0x7f0000001f40)=""/208, 0xd0}, 0x2040)
io_uring_setup(0x969, &(0x7f0000000700)={0x0, 0xb8b0, 0x8, 0x3, 0x3b})
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x10000000)
r5 = syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x7, 0xa, &(0x7f0000000600)=[{&(0x7f0000000080)="79ad56a7", 0x4, 0x5c5a5f72}, {&(0x7f00000000c0)="fb4ee6fa1c6368338f7c56051b713d4a23b9401e54a585e9dace95f60fe6eb91cdc63eefc4fa68f5e7e24db0cfad7bb87ed84734c3fb71b611997ac778d158f1fcdfd851f51e726cf95bf162ff7e3f3af3f559efa9bb83df27a59a5434313df7dcbabe8a06fe7d0853388b991dd7ca6e11fdb6baf0b0b4198e96931120ebcf442fb531d96ff9a88c5c18954b84dbbedacd19160ae6a613610b7da7ee36dcc6ce29d6d9b61be36a36004e9047a43ecac50f9a88f7fc5815bb94f1922d086a9d1110154f46234044d4702230fb528eb1acd798f3b9b73cdf7b0f6f8ece057aab2804d5ea327d778f9c", 0xe8, 0x4}, {&(0x7f0000000200)="9b5964b561c06a8cd6ea24ffdbf9a580a737ad000aec0d448c6c9a670a1a63f1688ff5fb6728dbea0caeb1127fdd0613c288a48b2b0651441612da738a05fe1e940f8fb371b5a91595085023781aafe25852299a5fcb7fe23993bf9a28fd08e4d98d39672ecc29e10a9926ea60ca5caeab4214408115c6bfbea391daffc39db0cf2d462dba1367528eff24156c8bbaa42a3b2535c6b79073168b7f38162c12a7bc8628d4c6d7525b1d7e17eec98b7f9f994eada8a6aad12635123a4cd4d67729c014beaad783ce27d71c0f3bba9af616ef02f2f75c6531bf6bcce890e05f8b5c2e9167f757d2853c5e", 0xe9, 0x7}, {&(0x7f0000000300)="f24be30e340715c3e490ed0156f3c735f052ad58b35876088300342a17dc88cf6ca347b068350775991c88e9c04725", 0x2f, 0x22bb}, {&(0x7f0000000340)="ac207b7b07fcce5073734ac4fa65373937596984f34aa4cfa0f4096cba6ab664702d80ea15137716fddf8716a8a2058f23d02a1918e9e6d1ff7f4103c4db2735c4a5cc0b18f1df2774338391355c7087f02c05d207a6d264833294269ab0998c3988eae5ae2e7d966c36f2b47b5c39714cd4e51a077322038359f9c2294784af0647b0e78404a49b5e7acae449be55797079ed48caba938fa79c52612eb04edbad8f8106146e057ad349b0d501d77a10a8a95892656427edb9ace70c194b4d015ffab0cb2ecf8ce4c34066517b1199764a6c1d4c5ca1fd0b62edf5da1a77ce6238db3833ba965ec62c637496c2ac09d1917bcf55a64ede07", 0xf8, 0x8}, {&(0x7f0000000440)="8bafb6f22ae5378f2cbd", 0xa, 0xfe0000000000}, {&(0x7f0000000480)="2db3d367442c2a87a475", 0xa, 0xfffffffffffffffa}, {&(0x7f00000004c0)="4e7ab9d37181fb576fadfadc72c6d4b16cdbcb5ea0f2a37f8c2a8e", 0x1b, 0x3}, {&(0x7f0000000500)="d2096c4f485047c29dcfc02ffc8181d423dc5c5f7c410a229a700a0ce5ca2f76efae38e66bb0c27400c38de803423e0d49ddeb9cc910648994c5ef94fc60c54b9de22578a462db444a2f45b8cc5d92dd028c47f3c654587c63d1444af675fda7d028b11820ec53dfb5ac521eb6e49c4ca88d5c172890d79e251435133690a04d22806478802fd7cd397526c273eb55b5b88917b9", 0x94, 0x110000000}, {&(0x7f00000005c0)}], 0x2000000, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d2f6465762f76637361002c6f626a5f747970653d2f6465762f76637361002c736d61636b6673666c6f6f723d2c736d61636b6673666c6f6f723d2f6465762f76636361002c7c4662d6e9b79d3d1300"])
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r5, 0x0, &(0x7f0000000840)='./file0\x00', 0x1, 0x220400, 0x23456}, 0x2)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
r7 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0xffffffff, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r8=>0x0, &(0x7f00000000c0))
bind$can_raw(r6, &(0x7f0000002080), 0x10)
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r7, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r7}, 0x93)
syz_io_uring_complete(r8)
syz_mount_image$ubifs(&(0x7f0000000780), &(0x7f00000007c0)='./file0\x00', 0x1, 0x1, &(0x7f0000000800)=[{&(0x7f0000000f00)="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", 0x1000, 0xffff}], 0x3002000, &(0x7f00000008c0)={[{@no_chk_data_crc}, {@bulk_read}, {@bulk_read}, {}, {@compr_lzo}, {@compr_zlib}, {@auth_hash_name={'auth_hash_name', 0x3d, 'ghash'}}, {@compr_zlib}], [{@fsuuid={'fsuuid', 0x3d, {[0x61, 0x64, 0x65, 0x61, 0x61, 0xf685cf03a4f23002, 0x37, 0x38], 0x2d, [0x39, 0x66, 0x37, 0x37], 0x2d, [0x62, 0x63, 0x39, 0x63], 0x2d, [0x35, 0x39, 0x34, 0x35], 0x2d, [0x66, 0x39, 0x56, 0x34, 0x39, 0x65, 0x61, 0x66]}}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@dont_appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, '#-%//'}}, {@hash}, {@fsname={'fsname', 0x3d, '/dev/vcsa\x00'}}, {@uid_lt}]})
setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x114, &(0x7f00000005c0)=0xfffffff9, 0x0, 0x4)

09:24:15 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

09:24:15 executing program 5:
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

09:24:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, 0x0, 0x0)

09:24:15 executing program 2:
socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180), &(0x7f00000001c0))

09:24:15 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

09:24:15 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000600), 0x10)
bind$can_raw(r0, 0x0, 0x0)

[  916.103797][ T3060] loop3: detected capacity change from 0 to 264192
09:24:15 executing program 5:
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

09:24:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, 0x0, 0x0)

09:24:15 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

09:24:16 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

[  916.240707][ T3060] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=4e000000)
09:24:16 executing program 3:
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
r4 = syz_io_uring_complete(r1)
syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
recvmsg$can_j1939(r4, &(0x7f0000002040)={&(0x7f0000000c00)=@phonet, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000c80)=""/41, 0x29}, {&(0x7f0000000cc0)=""/170, 0xaa}, {&(0x7f0000000d80)=""/94, 0x5e}, {&(0x7f0000000e00)=""/234, 0xea}], 0x4, &(0x7f0000001f40)=""/208, 0xd0}, 0x2040)
io_uring_setup(0x969, &(0x7f0000000700)={0x0, 0xb8b0, 0x8, 0x3, 0x3b})
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x10000000)
r5 = syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x7, 0xa, &(0x7f0000000600)=[{&(0x7f0000000080)="79ad56a7", 0x4, 0x5c5a5f72}, {&(0x7f00000000c0)="fb4ee6fa1c6368338f7c56051b713d4a23b9401e54a585e9dace95f60fe6eb91cdc63eefc4fa68f5e7e24db0cfad7bb87ed84734c3fb71b611997ac778d158f1fcdfd851f51e726cf95bf162ff7e3f3af3f559efa9bb83df27a59a5434313df7dcbabe8a06fe7d0853388b991dd7ca6e11fdb6baf0b0b4198e96931120ebcf442fb531d96ff9a88c5c18954b84dbbedacd19160ae6a613610b7da7ee36dcc6ce29d6d9b61be36a36004e9047a43ecac50f9a88f7fc5815bb94f1922d086a9d1110154f46234044d4702230fb528eb1acd798f3b9b73cdf7b0f6f8ece057aab2804d5ea327d778f9c", 0xe8, 0x4}, {&(0x7f0000000200)="9b5964b561c06a8cd6ea24ffdbf9a580a737ad000aec0d448c6c9a670a1a63f1688ff5fb6728dbea0caeb1127fdd0613c288a48b2b0651441612da738a05fe1e940f8fb371b5a91595085023781aafe25852299a5fcb7fe23993bf9a28fd08e4d98d39672ecc29e10a9926ea60ca5caeab4214408115c6bfbea391daffc39db0cf2d462dba1367528eff24156c8bbaa42a3b2535c6b79073168b7f38162c12a7bc8628d4c6d7525b1d7e17eec98b7f9f994eada8a6aad12635123a4cd4d67729c014beaad783ce27d71c0f3bba9af616ef02f2f75c6531bf6bcce890e05f8b5c2e9167f757d2853c5e", 0xe9, 0x7}, {&(0x7f0000000300)="f24be30e340715c3e490ed0156f3c735f052ad58b35876088300342a17dc88cf6ca347b068350775991c88e9c04725", 0x2f, 0x22bb}, {&(0x7f0000000340)="ac207b7b07fcce5073734ac4fa65373937596984f34aa4cfa0f4096cba6ab664702d80ea15137716fddf8716a8a2058f23d02a1918e9e6d1ff7f4103c4db2735c4a5cc0b18f1df2774338391355c7087f02c05d207a6d264833294269ab0998c3988eae5ae2e7d966c36f2b47b5c39714cd4e51a077322038359f9c2294784af0647b0e78404a49b5e7acae449be55797079ed48caba938fa79c52612eb04edbad8f8106146e057ad349b0d501d77a10a8a95892656427edb9ace70c194b4d015ffab0cb2ecf8ce4c34066517b1199764a6c1d4c5ca1fd0b62edf5da1a77ce6238db3833ba965ec62c637496c2ac09d1917bcf55a64ede07", 0xf8, 0x8}, {&(0x7f0000000440)="8bafb6f22ae5378f2cbd", 0xa, 0xfe0000000000}, {&(0x7f0000000480)="2db3d367442c2a87a475", 0xa, 0xfffffffffffffffa}, {&(0x7f00000004c0)="4e7ab9d37181fb576fadfadc72c6d4b16cdbcb5ea0f2a37f8c2a8e", 0x1b, 0x3}, {&(0x7f0000000500)="d2096c4f485047c29dcfc02ffc8181d423dc5c5f7c410a229a700a0ce5ca2f76efae38e66bb0c27400c38de803423e0d49ddeb9cc910648994c5ef94fc60c54b9de22578a462db444a2f45b8cc5d92dd028c47f3c654587c63d1444af675fda7d028b11820ec53dfb5ac521eb6e49c4ca88d5c172890d79e251435133690a04d22806478802fd7cd397526c273eb55b5b88917b9", 0x94, 0x110000000}, {&(0x7f00000005c0)}], 0x2000000, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="2c61707072616973655f747970653d696d617369672c6f626a5f747970653d2f6465762f76637361002c6f626a5f747970653d2f6465762f76637361002c736d61636b6673666c6f6f723d2c736d61636b6673666c6f6f723d2f6465762f76636361002c7c4662d6e9b79d3d1300"])
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r5, 0x0, &(0x7f0000000840)='./file0\x00', 0x1, 0x220400, 0x23456}, 0x2)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
r7 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0xffffffff, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r8=>0x0, &(0x7f00000000c0))
bind$can_raw(r6, &(0x7f0000002080), 0x10)
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r7, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r7}, 0x93)
syz_io_uring_complete(r8)
syz_mount_image$ubifs(&(0x7f0000000780), &(0x7f00000007c0)='./file0\x00', 0x1, 0x1, &(0x7f0000000800)=[{&(0x7f0000000f00)="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", 0x1000, 0xffff}], 0x3002000, &(0x7f00000008c0)={[{@no_chk_data_crc}, {@bulk_read}, {@bulk_read}, {}, {@compr_lzo}, {@compr_zlib}, {@auth_hash_name={'auth_hash_name', 0x3d, 'ghash'}}, {@compr_zlib}], [{@fsuuid={'fsuuid', 0x3d, {[0x61, 0x64, 0x65, 0x61, 0x61, 0xf685cf03a4f23002, 0x37, 0x38], 0x2d, [0x39, 0x66, 0x37, 0x37], 0x2d, [0x62, 0x63, 0x39, 0x63], 0x2d, [0x35, 0x39, 0x34, 0x35], 0x2d, [0x66, 0x39, 0x56, 0x34, 0x39, 0x65, 0x61, 0x66]}}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@dont_appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, '#-%//'}}, {@hash}, {@fsname={'fsname', 0x3d, '/dev/vcsa\x00'}}, {@uid_lt}]})
setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x114, &(0x7f00000005c0)=0xfffffff9, 0x0, 0x4)

09:24:16 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

09:24:16 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000600), 0x10)
bind$can_raw(r0, 0x0, 0x0)

09:24:16 executing program 2:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f00000001c0))

09:24:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)

09:24:16 executing program 0:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x200, @any, 0xff8, 0x1}, 0xe)

09:24:16 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

09:24:16 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000600), 0x10)
bind$can_raw(r0, 0x0, 0x0)

[  916.548701][ T3096] loop3: detected capacity change from 0 to 264192
09:24:16 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

09:24:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)

09:24:16 executing program 0:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x200, @any, 0xff8, 0x1}, 0xe)

09:24:16 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$bt_l2cap(r0, &(0x7f0000001580), &(0x7f00000015c0)=0xe, 0x800)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x14}, 0x100, 0x1}, 0xe)

[  916.627899][ T3096] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=4e000000)
[  916.699438][ T3111] loop3: detected capacity change from 0 to 255
09:24:16 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
socket(0x11, 0x3, 0x7)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
accept4$bt_l2cap(r1, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x100000)

09:24:16 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, 0x0, 0x4000)

09:24:16 executing program 2:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)

09:24:16 executing program 0:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x200, @any, 0xff8, 0x1}, 0xe)

09:24:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)

09:24:16 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$bt_l2cap(r0, &(0x7f0000001580), &(0x7f00000015c0)=0xe, 0x800)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x14}, 0x100, 0x1}, 0xe)

09:24:16 executing program 2:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)

09:24:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)

09:24:16 executing program 0:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x200, @any, 0xff8, 0x1}, 0xe)

09:24:16 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
socket(0x11, 0x3, 0x7)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
accept4$bt_l2cap(r1, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x100000)

09:24:16 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = accept4$bt_l2cap(r0, &(0x7f0000001580), &(0x7f00000015c0)=0xe, 0x800)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x14}, 0x100, 0x1}, 0xe)

09:24:16 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, 0x0, 0x4000)

09:24:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)

09:24:16 executing program 0:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x200, @any, 0xff8, 0x1}, 0xe)

09:24:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)

09:24:16 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, 0x0, 0x4000)

09:24:16 executing program 2:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)

09:24:16 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
socket(0x11, 0x3, 0x7)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
accept4$bt_l2cap(r1, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x100000)

09:24:16 executing program 4:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x14}, 0x100, 0x1}, 0xe)

09:24:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)

09:24:17 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

09:24:17 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
socket(0x11, 0x3, 0x7)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)

09:24:17 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
socket(0x11, 0x3, 0x7)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
accept4$bt_l2cap(r1, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x100000)

09:24:17 executing program 0:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x200, @any, 0xff8, 0x1}, 0xe)

09:24:17 executing program 4:
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x14}, 0x100, 0x1}, 0xe)

09:24:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)

09:24:17 executing program 0:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x200, @any, 0xff8, 0x1}, 0xe)

09:24:17 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
socket(0x11, 0x3, 0x7)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

09:24:17 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

09:24:17 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
socket(0x11, 0x3, 0x7)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
accept4$bt_l2cap(r1, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x100000)

09:24:17 executing program 4:
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)

09:24:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)

09:24:17 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

09:24:17 executing program 0:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x200, @any, 0xff8, 0x1}, 0xe)

09:24:17 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
socket(0x11, 0x3, 0x7)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)

09:24:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)

09:24:17 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
socket(0x11, 0x3, 0x7)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
accept4$bt_l2cap(r1, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x100000)

09:24:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)

09:24:17 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

09:24:17 executing program 4:
userfaultfd(0x80000)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x682, 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=0x30)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000100)=0x200, &(0x7f0000000140)=0x4)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x3}, {0x1, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x38)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000200)={0x5, 0x21f3, 0x2, 0x81, 0x6, 0x9, 0x7}, 0xc)
r3 = syz_open_dev$binderN(&(0x7f0000000240), 0x0, 0x802)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@flat=@handle={0x73682a85, 0x110b, 0x1}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/177, 0xb1, 0x1, 0x26}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}}], 0x55, 0x0, &(0x7f00000004c0)="7b5438a4b0dd9464c284fb980d9c73a209db69dbb4c39558d665283a1214fa7bb7368f90eada4618c934a62fb1e2e478cb3c7a59b01dff786a58c0e9b0d3127000a23af060bcda892ab22f6c37bb72ca16b15ca824"})
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000580)={0xaa, 0x50})
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000005c0)=0x10, 0x4)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000600)=[{{0x1, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4}}], 0x20)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000640)=0x7, 0x4)
ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000680))

09:24:17 executing program 0:
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x200, @any, 0xff8, 0x1}, 0xe)

09:24:17 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)

09:24:17 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
socket(0x11, 0x3, 0x7)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)

09:24:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

09:24:17 executing program 4:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000100)={0x5, "41ba52"}, 0x6)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
io_uring_setup(0x26c3, &(0x7f0000000140)={0x0, 0x7ca1, 0x8, 0x0, 0xe8})
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x202000, 0x0)

09:24:17 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

09:24:17 executing program 0:
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x200, @any, 0xff8, 0x1}, 0xe)

09:24:17 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)

09:24:17 executing program 1:
capset(0x0, &(0x7f0000000a00)={0x7fff, 0x8, 0xe00, 0x40, 0x800, 0x1})

09:24:17 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
socket(0x11, 0x3, 0x7)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

09:24:17 executing program 4:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000100)={0x5, "41ba52"}, 0x6)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
io_uring_setup(0x26c3, &(0x7f0000000140)={0x0, 0x7ca1, 0x8, 0x0, 0xe8})
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x202000, 0x0)

09:24:18 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

09:24:18 executing program 0:
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x200, @any, 0xff8, 0x1}, 0xe)

09:24:18 executing program 3:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:24:18 executing program 1:
capset(0x0, &(0x7f0000000a00)={0x7fff, 0x8, 0xe00, 0x40, 0x800, 0x1})

09:24:18 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
socket(0x11, 0x3, 0x7)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)

09:24:18 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

09:24:18 executing program 4:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000100)={0x5, "41ba52"}, 0x6)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
io_uring_setup(0x26c3, &(0x7f0000000140)={0x0, 0x7ca1, 0x8, 0x0, 0xe8})
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x202000, 0x0)

09:24:18 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x200, @any, 0xff8, 0x1}, 0xe)

09:24:18 executing program 3:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:24:18 executing program 1:
capset(0x0, &(0x7f0000000a00)={0x7fff, 0x8, 0xe00, 0x40, 0x800, 0x1})

09:24:18 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

09:24:18 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
socket(0x11, 0x3, 0x7)

09:24:18 executing program 1:
capset(0x0, 0x0)

09:24:18 executing program 2:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket(0x11, 0x3, 0x7)

09:24:18 executing program 3:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:24:18 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

09:24:18 executing program 4:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000100)={0x5, "41ba52"}, 0x6)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
io_uring_setup(0x26c3, &(0x7f0000000140)={0x0, 0x7ca1, 0x8, 0x0, 0xe8})

09:24:18 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x200, @any, 0xff8, 0x1}, 0xe)

09:24:18 executing program 2:
socket(0x11, 0x3, 0x7)

09:24:18 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
recvmsg$can_j1939(r1, &(0x7f0000003280)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=""/4096, 0x1000}, 0x0)
accept4$bt_l2cap(r2, 0x0, 0x0, 0x80800)

09:24:18 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)

09:24:18 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

09:24:18 executing program 4:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000100)={0x5, "41ba52"}, 0x6)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_uring_setup(0x26c3, &(0x7f0000000140)={0x0, 0x7ca1, 0x8, 0x0, 0xe8})

09:24:18 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x200, @any, 0xff8, 0x1}, 0xe)

09:24:18 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)

09:24:18 executing program 4:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000100)={0x5, "41ba52"}, 0x6)
io_uring_setup(0x26c3, &(0x7f0000000140)={0x0, 0x7ca1, 0x8, 0x0, 0xe8})

09:24:18 executing program 2:
socket(0x0, 0x3, 0x7)

09:24:18 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
recvmsg$can_j1939(r1, &(0x7f0000003280)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=""/4096, 0x1000}, 0x0)
accept4$bt_l2cap(r2, 0x0, 0x0, 0x80800)

09:24:18 executing program 0:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

09:24:18 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x1, 0x0, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

09:24:18 executing program 4:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
io_uring_setup(0x26c3, &(0x7f0000000140)={0x0, 0x7ca1, 0x8, 0x0, 0xe8})

09:24:18 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)

09:24:18 executing program 2:
socket(0x0, 0x3, 0x7)

09:24:19 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

09:24:19 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

09:24:19 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
recvmsg$can_j1939(r1, &(0x7f0000003280)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=""/4096, 0x1000}, 0x0)
accept4$bt_l2cap(r2, 0x0, 0x0, 0x80800)

09:24:19 executing program 3:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:24:19 executing program 4:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_uring_setup(0x26c3, &(0x7f0000000140)={0x0, 0x7ca1, 0x8, 0x0, 0xe8})

09:24:19 executing program 2:
socket(0x0, 0x3, 0x7)

09:24:19 executing program 0:
userfaultfd(0x80000)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x682, 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=0x30)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000100)=0x200, &(0x7f0000000140)=0x4)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x3}, {0x1, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x38)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000200)={0x5, 0x21f3, 0x2, 0x81, 0x6, 0x9, 0x7}, 0xc)
r3 = syz_open_dev$binderN(&(0x7f0000000240), 0x0, 0x802)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@flat=@handle={0x73682a85, 0x110b, 0x1}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/177, 0xb1, 0x1, 0x26}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}}], 0x55, 0x0, &(0x7f00000004c0)="7b5438a4b0dd9464c284fb980d9c73a209db69dbb4c39558d665283a1214fa7bb7368f90eada4618c934a62fb1e2e478cb3c7a59b01dff786a58c0e9b0d3127000a23af060bcda892ab22f6c37bb72ca16b15ca824"})
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000580)={0xaa, 0x50})
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000005c0)=0x10, 0x4)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000600)=[{{0x1, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4}}], 0x20)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000640)=0x7, 0x4)
ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000680))

09:24:19 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, 0x0, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

09:24:19 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
recvmsg$can_j1939(r1, &(0x7f0000003280)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=""/4096, 0x1000}, 0x0)

09:24:19 executing program 3:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:24:19 executing program 4:
io_uring_setup(0x26c3, &(0x7f0000000140)={0x0, 0x7ca1, 0x8, 0x0, 0xe8})

09:24:19 executing program 2:
socket(0x11, 0x0, 0x7)

09:24:19 executing program 0:
userfaultfd(0x80000)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x682, 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=0x30)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000100)=0x200, &(0x7f0000000140)=0x4)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x3}, {0x1, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x38)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000200)={0x5, 0x21f3, 0x2, 0x81, 0x6, 0x9, 0x7}, 0xc)
r3 = syz_open_dev$binderN(&(0x7f0000000240), 0x0, 0x802)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@flat=@handle={0x73682a85, 0x110b, 0x1}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/177, 0xb1, 0x1, 0x26}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}}], 0x55, 0x0, &(0x7f00000004c0)="7b5438a4b0dd9464c284fb980d9c73a209db69dbb4c39558d665283a1214fa7bb7368f90eada4618c934a62fb1e2e478cb3c7a59b01dff786a58c0e9b0d3127000a23af060bcda892ab22f6c37bb72ca16b15ca824"})
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000580)={0xaa, 0x50})
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000005c0)=0x10, 0x4)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000600)=[{{0x1, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4}}], 0x20)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000640)=0x7, 0x4)
ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000680))

09:24:19 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x60, 0x0, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

09:24:19 executing program 3:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:24:19 executing program 4:
io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x7ca1, 0x8, 0x0, 0xe8})

09:24:19 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
recvmsg$can_j1939(r1, &(0x7f0000003280)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=""/4096, 0x1000}, 0x0)

09:24:19 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

09:24:19 executing program 2:
socket(0x11, 0x0, 0x7)

09:24:19 executing program 3:
socket(0x11, 0x0, 0x7)

09:24:19 executing program 4:
io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x7ca1, 0x8, 0x0, 0xe8})

09:24:19 executing program 0:
userfaultfd(0x80000)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x682, 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=0x30)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000100)=0x200, &(0x7f0000000140)=0x4)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x3}, {0x1, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x38)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000200)={0x5, 0x21f3, 0x2, 0x81, 0x6, 0x9, 0x7}, 0xc)
r3 = syz_open_dev$binderN(&(0x7f0000000240), 0x0, 0x802)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@flat=@handle={0x73682a85, 0x110b, 0x1}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/177, 0xb1, 0x1, 0x26}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}}], 0x55, 0x0, &(0x7f00000004c0)="7b5438a4b0dd9464c284fb980d9c73a209db69dbb4c39558d665283a1214fa7bb7368f90eada4618c934a62fb1e2e478cb3c7a59b01dff786a58c0e9b0d3127000a23af060bcda892ab22f6c37bb72ca16b15ca824"})
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000580)={0xaa, 0x50})
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000005c0)=0x10, 0x4)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000600)=[{{0x1, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4}}], 0x20)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000640)=0x7, 0x4)
ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000680))

09:24:19 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

09:24:19 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=""/4096, 0x1000}, 0x0)

09:24:19 executing program 3:
socket(0x11, 0x0, 0x7)

09:24:19 executing program 4:
io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x7ca1, 0x8, 0x0, 0xe8})

09:24:19 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6)
r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x36aa, @none, 0xc1f, 0x2}, 0xe)

09:24:19 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x0, 0x1}, 0x14}}, 0x4000)

09:24:19 executing program 2:
socket(0x11, 0x0, 0x7)

09:24:19 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=""/4096, 0x1000}, 0x0)

09:24:19 executing program 3:
socket(0x11, 0x0, 0x7)

09:24:19 executing program 4:
io_uring_setup(0x26c3, 0x0)

09:24:19 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6)
r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x36aa, @none, 0xc1f, 0x2}, 0xe)

09:24:19 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=""/4096, 0x1000}, 0x0)

09:24:20 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x0, 0x1}, 0x14}}, 0x0)

09:24:20 executing program 2:
socket(0x11, 0x3, 0x0)

09:24:20 executing program 4:
io_uring_setup(0x26c3, 0x0)

09:24:20 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6)
r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x36aa, @none, 0xc1f, 0x2}, 0xe)

09:24:20 executing program 3:
socket(0x0, 0x0, 0x7)

09:24:20 executing program 1:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
recvmsg$can_j1939(r0, &(0x7f0000003280)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=""/4096, 0x1000}, 0x0)

09:24:20 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6)
r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x36aa, @none, 0xc1f, 0x2}, 0xe)

09:24:20 executing program 2:
socket(0x11, 0x3, 0x0)

09:24:20 executing program 4:
io_uring_setup(0x26c3, 0x0)

09:24:20 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:24:20 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
recvmsg$can_j1939(r0, &(0x7f0000003280)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=""/4096, 0x1000}, 0x0)

09:24:20 executing program 3:
socket(0x0, 0x0, 0x7)

09:24:20 executing program 2:
socket(0x11, 0x3, 0x0)

09:24:20 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6)
r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x36aa, @none, 0xc1f, 0x2}, 0xe)

09:24:20 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6)

09:24:20 executing program 4:
io_uring_setup(0x26c3, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0xe8})

09:24:20 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
recvmsg$can_j1939(r0, &(0x7f0000003280)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=""/4096, 0x1000}, 0x0)

09:24:20 executing program 2:
socket(0x11, 0x3, 0x0)

09:24:20 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6)
r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x36aa, @none, 0xc1f, 0x2}, 0xe)

09:24:20 executing program 4:
io_uring_setup(0x26c3, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0xe8})

09:24:20 executing program 3:
socket(0x0, 0x0, 0x7)

09:24:20 executing program 0:
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6)

09:24:20 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
recvmsg$can_j1939(r0, &(0x7f0000003280)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=""/4096, 0x1000}, 0x0)

09:24:20 executing program 2:
socket(0x11, 0x3, 0x0)

09:24:20 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:24:20 executing program 4:
io_uring_setup(0x26c3, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0xe8})

09:24:20 executing program 0:
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6)

09:24:20 executing program 2:
socket(0x11, 0x3, 0x0)

09:24:20 executing program 3:
socket(0x11, 0x0, 0x0)

09:24:20 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
recvmsg$can_j1939(r0, &(0x7f0000003280)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=""/4096, 0x1000}, 0x0)

09:24:20 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6)

09:24:21 executing program 0:
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6)

09:24:21 executing program 4:
io_uring_setup(0x26c3, &(0x7f0000000140)={0x0, 0x7ca1, 0x0, 0x0, 0xe8})

09:24:21 executing program 2:
socket(0x0, 0x3, 0x0)

09:24:21 executing program 3:
io_uring_setup(0x26c3, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0xe8})

09:24:21 executing program 1:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=""/4096, 0x1000}, 0x0)

09:24:21 executing program 4:
io_uring_setup(0x26c3, &(0x7f0000000140)={0x0, 0x7ca1, 0x0, 0x0, 0xe8})

09:24:21 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

09:24:21 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6)

09:24:21 executing program 1:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=""/4096, 0x1000}, 0x0)

09:24:21 executing program 3:
io_uring_setup(0x26c3, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0xe8})

09:24:21 executing program 2:
socket(0x0, 0x3, 0x0)

09:24:21 executing program 4:
io_uring_setup(0x26c3, &(0x7f0000000140)={0x0, 0x7ca1, 0x0, 0x0, 0xe8})

09:24:21 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)

09:24:21 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6)

09:24:21 executing program 1:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=""/4096, 0x1000}, 0x0)

09:24:21 executing program 3:
io_uring_setup(0x26c3, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0xe8})

09:24:21 executing program 4:
io_uring_setup(0x26c3, &(0x7f0000000140)={0x0, 0x7ca1, 0x8})

09:24:21 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
recvmsg$can_j1939(r0, 0x0, 0x0)

09:24:21 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)

09:24:21 executing program 2:
socket(0x0, 0x3, 0x0)

09:24:21 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6)

09:24:21 executing program 4:
io_uring_setup(0x26c3, &(0x7f0000000140)={0x0, 0x7ca1, 0x0, 0x0, 0xe8})

09:24:21 executing program 3:
io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0xe8})

09:24:21 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)

09:24:21 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)

09:24:21 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6)

09:24:21 executing program 2:
socket(0x11, 0x0, 0x0)

09:24:21 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x4054)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept4$bt_l2cap(r1, &(0x7f00000005c0)={0x1f, 0x0, @none}, &(0x7f0000000600)=0xe, 0x800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}}]}, 0x48}}, 0x400d1)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r0)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0001f46e657464657673696d0000000f0002006e657464657673696d30000008000b00030000000600112093d9b3b27fc138e9ff0f000008001300090000000500140001000000000800"/86], 0x54}, 0x1, 0x0, 0x0, 0x44040}, 0x1)

09:24:21 executing program 3:
io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0xe8})

09:24:21 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x4054)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept4$bt_l2cap(r1, &(0x7f00000005c0)={0x1f, 0x0, @none}, &(0x7f0000000600)=0xe, 0x800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}}]}, 0x48}}, 0x400d1)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r0)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0001f46e657464657673696d0000000f0002006e657464657673696d30000008000b00030000000600112093d9b3b27fc138e9ff0f000008001300090000000500140001000000000800"/86], 0x54}, 0x1, 0x0, 0x0, 0x44040}, 0x1)

09:24:21 executing program 1:
userfaultfd(0x80000)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x682, 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=0x30)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000100)=0x200, &(0x7f0000000140)=0x4)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x3}, {0x1, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x38)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000200)={0x5, 0x21f3, 0x2, 0x81, 0x6, 0x9, 0x7}, 0xc)
r3 = syz_open_dev$binderN(&(0x7f0000000240), 0x0, 0x802)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@flat=@handle={0x73682a85, 0x110b, 0x1}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/177, 0xb1, 0x1, 0x26}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}}], 0x55, 0x0, &(0x7f00000004c0)="7b5438a4b0dd9464c284fb980d9c73a209db69dbb4c39558d665283a1214fa7bb7368f90eada4618c934a62fb1e2e478cb3c7a59b01dff786a58c0e9b0d3127000a23af060bcda892ab22f6c37bb72ca16b15ca824"})
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000580)={0xaa, 0x50})
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000005c0)=0x10, 0x4)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000600)=[{{0x1, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4}}], 0x20)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000640)=0x7, 0x4)
ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000680))

09:24:21 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6)

09:24:22 executing program 2:
socket(0x11, 0x0, 0x0)

09:24:22 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x4054)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept4$bt_l2cap(r1, &(0x7f00000005c0)={0x1f, 0x0, @none}, &(0x7f0000000600)=0xe, 0x800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}}]}, 0x48}}, 0x400d1)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r0)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0001f46e657464657673696d0000000f0002006e657464657673696d30000008000b00030000000600112093d9b3b27fc138e9ff0f000008001300090000000500140001000000000800"/86], 0x54}, 0x1, 0x0, 0x0, 0x44040}, 0x1)

09:24:22 executing program 3:
io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0xe8})

09:24:22 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fcdbdf253d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400050000000000000011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c746963617374000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000e000100a6227464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x4054)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept4$bt_l2cap(r1, &(0x7f00000005c0)={0x1f, 0x0, @none}, &(0x7f0000000600)=0xe, 0x800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}}]}, 0x48}}, 0x400d1)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r0)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0001f46e657464657673696d0000000f0002006e657464657673696d30000008000b00030000000600112093d9b3b27fc138e9ff0f000008001300090000000500140001000000000800"/86], 0x54}, 0x1, 0x0, 0x0, 0x44040}, 0x1)

09:24:22 executing program 2:
socket(0x11, 0x0, 0x0)

09:24:22 executing program 1:
userfaultfd(0x80000)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x682, 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=0x30)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000100)=0x200, &(0x7f0000000140)=0x4)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x3}, {0x1, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x38)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000200)={0x5, 0x21f3, 0x2, 0x81, 0x6, 0x9, 0x7}, 0xc)
r3 = syz_open_dev$binderN(&(0x7f0000000240), 0x0, 0x802)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@flat=@handle={0x73682a85, 0x110b, 0x1}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/177, 0xb1, 0x1, 0x26}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}}], 0x55, 0x0, &(0x7f00000004c0)="7b5438a4b0dd9464c284fb980d9c73a209db69dbb4c39558d665283a1214fa7bb7368f90eada4618c934a62fb1e2e478cb3c7a59b01dff786a58c0e9b0d3127000a23af060bcda892ab22f6c37bb72ca16b15ca824"})
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000580)={0xaa, 0x50})
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000005c0)=0x10, 0x4)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000600)=[{{0x1, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4}}], 0x20)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000640)=0x7, 0x4)
ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000680))

09:24:22 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6)

09:24:22 executing program 3:
io_uring_setup(0x26c3, 0x0)

09:24:22 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x4054)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept4$bt_l2cap(r1, &(0x7f00000005c0)={0x1f, 0x0, @none}, &(0x7f0000000600)=0xe, 0x800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}}]}, 0x48}}, 0x400d1)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r0)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0001f46e657464657673696d0000000f0002006e657464657673696d30000008000b00030000000600112093d9b3b27fc138e9ff0f000008001300090000000500140001000000000800"/86], 0x54}, 0x1, 0x0, 0x0, 0x44040}, 0x1)

09:24:22 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x4054)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept4$bt_l2cap(r1, &(0x7f00000005c0)={0x1f, 0x0, @none}, &(0x7f0000000600)=0xe, 0x800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}}]}, 0x48}}, 0x400d1)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r0)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0001f46e657464657673696d0000000f0002006e657464657673696d30000008000b00030000000600112093d9b3b27fc138e9ff0f000008001300090000000500140001000000000800"/86], 0x54}, 0x1, 0x0, 0x0, 0x44040}, 0x1)

09:24:22 executing program 2:
userfaultfd(0x80000)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x682, 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=0x30)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000100)=0x200, &(0x7f0000000140)=0x4)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x3}, {0x1, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x38)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000200)={0x5, 0x21f3, 0x2, 0x81, 0x6, 0x9, 0x7}, 0xc)
r3 = syz_open_dev$binderN(&(0x7f0000000240), 0x0, 0x802)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@flat=@handle={0x73682a85, 0x110b, 0x1}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/177, 0xb1, 0x1, 0x26}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}}], 0x55, 0x0, &(0x7f00000004c0)="7b5438a4b0dd9464c284fb980d9c73a209db69dbb4c39558d665283a1214fa7bb7368f90eada4618c934a62fb1e2e478cb3c7a59b01dff786a58c0e9b0d3127000a23af060bcda892ab22f6c37bb72ca16b15ca824"})
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000580)={0xaa, 0x50})
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000005c0)=0x10, 0x4)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000600)=[{{0x1, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4}}], 0x20)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000640)=0x7, 0x4)
ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000680))

09:24:22 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000080))

09:24:22 executing program 3:
io_uring_setup(0x26c3, 0x0)

09:24:22 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040))
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x6)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@local, @in6=@initdev}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000200)=0xe8)
r2 = syz_io_uring_complete(0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r3, 0x100, 0x70bd2b, 0x1a, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x6136}, {0x8, 0x15, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048000}, 0x4040801)
socket$inet(0x2, 0x5, 0x2)

09:24:22 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x4054)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept4$bt_l2cap(r1, &(0x7f00000005c0)={0x1f, 0x0, @none}, &(0x7f0000000600)=0xe, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r2, 0x10, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}}]}, 0x48}}, 0x400d1)
syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r0)

09:24:22 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fcdbdf253d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400050000000000000011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c746963617374000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000e000100a6227464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x4054)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept4$bt_l2cap(r1, &(0x7f00000005c0)={0x1f, 0x0, @none}, &(0x7f0000000600)=0xe, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r2, 0x10, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}}]}, 0x48}}, 0x400d1)
syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r0)

09:24:22 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

09:24:22 executing program 2:
userfaultfd(0x80000)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x682, 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=0x30)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000100)=0x200, &(0x7f0000000140)=0x4)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x3}, {0x1, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x38)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000200)={0x5, 0x21f3, 0x2, 0x81, 0x6, 0x9, 0x7}, 0xc)
r3 = syz_open_dev$binderN(&(0x7f0000000240), 0x0, 0x802)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@flat=@handle={0x73682a85, 0x110b, 0x1}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/177, 0xb1, 0x1, 0x26}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}}], 0x55, 0x0, &(0x7f00000004c0)="7b5438a4b0dd9464c284fb980d9c73a209db69dbb4c39558d665283a1214fa7bb7368f90eada4618c934a62fb1e2e478cb3c7a59b01dff786a58c0e9b0d3127000a23af060bcda892ab22f6c37bb72ca16b15ca824"})
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000580)={0xaa, 0x50})
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000005c0)=0x10, 0x4)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000600)=[{{0x1, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4}}], 0x20)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000640)=0x7, 0x4)
ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000680))

09:24:22 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x4054)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept4$bt_l2cap(r1, &(0x7f00000005c0)={0x1f, 0x0, @none}, &(0x7f0000000600)=0xe, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r2, 0x10, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}}]}, 0x48}}, 0x400d1)

09:24:22 executing program 3:
io_uring_setup(0x26c3, 0x0)

09:24:22 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x4054)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept4$bt_l2cap(r1, &(0x7f00000005c0)={0x1f, 0x0, @none}, &(0x7f0000000600)=0xe, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r2, 0x10, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}}]}, 0x48}}, 0x400d1)

09:24:22 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

09:24:22 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040))
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x6)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@local, @in6=@initdev}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000200)=0xe8)
r2 = syz_io_uring_complete(0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r3, 0x100, 0x70bd2b, 0x1a, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x6136}, {0x8, 0x15, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048000}, 0x4040801)
socket$inet(0x2, 0x5, 0x2)

09:24:22 executing program 3:
io_uring_setup(0x26c3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xe8})

09:24:22 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040))
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x6)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@local, @in6=@initdev}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000200)=0xe8)
r2 = syz_io_uring_complete(0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r3, 0x100, 0x70bd2b, 0x1a, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x6136}, {0x8, 0x15, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048000}, 0x4040801)
socket$inet(0x2, 0x5, 0x2)

09:24:22 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fcdbdf253d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400050000000000000011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c746963617374000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000e000100a6227464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x4054)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept4$bt_l2cap(r1, &(0x7f00000005c0)={0x1f, 0x0, @none}, &(0x7f0000000600)=0xe, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0)

09:24:22 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

09:24:22 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x4054)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept4$bt_l2cap(r1, &(0x7f00000005c0)={0x1f, 0x0, @none}, &(0x7f0000000600)=0xe, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0)

09:24:22 executing program 3:
io_uring_setup(0x26c3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xe8})

09:24:23 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040))
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x6)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@local, @in6=@initdev}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000200)=0xe8)
r2 = syz_io_uring_complete(0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r3, 0x100, 0x70bd2b, 0x1a, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x6136}, {0x8, 0x15, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048000}, 0x4040801)
socket$inet(0x2, 0x5, 0x2)

09:24:23 executing program 0:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)

09:24:23 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x4054)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept4$bt_l2cap(r1, &(0x7f00000005c0)={0x1f, 0x0, @none}, &(0x7f0000000600)=0xe, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)

09:24:23 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x4054)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept4$bt_l2cap(r1, &(0x7f00000005c0)={0x1f, 0x0, @none}, &(0x7f0000000600)=0xe, 0x800)
syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0)

09:24:23 executing program 3:
io_uring_setup(0x26c3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xe8})

09:24:23 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040))
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x6)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@local, @in6=@initdev}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000200)=0xe8)
r2 = syz_io_uring_complete(0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r3, 0x100, 0x70bd2b, 0x1a, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x6136}, {0x8, 0x15, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048000}, 0x4040801)
socket$inet(0x2, 0x5, 0x2)

09:24:23 executing program 0:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)

09:24:23 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x4054)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept4$bt_l2cap(r1, &(0x7f00000005c0)={0x1f, 0x0, @none}, &(0x7f0000000600)=0xe, 0x800)

09:24:23 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040))
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x6)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@local, @in6=@initdev}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000200)=0xe8)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1)
socket$inet(0x2, 0x5, 0x2)

09:24:23 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x4054)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0)

09:24:23 executing program 3:
io_uring_setup(0x26c3, &(0x7f0000000140)={0x0, 0x0, 0x8})

09:24:23 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x4054)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x0, @none}, &(0x7f0000000600)=0xe, 0x800)

09:24:23 executing program 0:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)

09:24:23 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040))
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x6)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@local, @in6=@initdev}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000200)=0xe8)
syz_io_uring_complete(0x0)
socket$inet(0x2, 0x5, 0x2)

09:24:23 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x4054)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0)

09:24:23 executing program 3:
userfaultfd(0x80000)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x682, 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=0x30)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000100)=0x200, &(0x7f0000000140)=0x4)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x3}, {0x1, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x38)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000200)={0x5, 0x21f3, 0x2, 0x81, 0x6, 0x9, 0x7}, 0xc)
r3 = syz_open_dev$binderN(&(0x7f0000000240), 0x0, 0x802)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@flat=@handle={0x73682a85, 0x110b, 0x1}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/177, 0xb1, 0x1, 0x26}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}}], 0x55, 0x0, &(0x7f00000004c0)="7b5438a4b0dd9464c284fb980d9c73a209db69dbb4c39558d665283a1214fa7bb7368f90eada4618c934a62fb1e2e478cb3c7a59b01dff786a58c0e9b0d3127000a23af060bcda892ab22f6c37bb72ca16b15ca824"})
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000580)={0xaa, 0x50})
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000005c0)=0x10, 0x4)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000600)=[{{0x1, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4}}], 0x20)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000640)=0x7, 0x4)
ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000680))

09:24:23 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040))
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x6)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@local, @in6=@initdev}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000200)=0xe8)
r2 = syz_io_uring_complete(0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r3, 0x100, 0x70bd2b, 0x1a, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x6136}, {0x8, 0x15, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048000}, 0x4040801)
socket$inet(0x2, 0x5, 0x2)

09:24:23 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x4054)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x0, @none}, &(0x7f0000000600)=0xe, 0x800)

09:24:23 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0)

09:24:23 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x4054)
syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0)

09:24:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x80000000}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x80000000}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x2, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='veth1_to_team\x00', 0x1000, 0xb5, 0x7})
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:24:23 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0)

09:24:23 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040))
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x6)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@local, @in6=@initdev}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000200)=0xe8)
socket$inet(0x2, 0x5, 0x2)

09:24:23 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x4054)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x0, @none}, &(0x7f0000000600)=0xe, 0x800)

09:24:23 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0)

09:24:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x80000000}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x80000000}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x2, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='veth1_to_team\x00', 0x1000, 0xb5, 0x7})
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:24:23 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040))
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x6)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@local, @in6=@initdev}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000200)=0xe8)
r2 = syz_io_uring_complete(0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r3, 0x100, 0x70bd2b, 0x1a, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x6136}, {0x8, 0x15, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048000}, 0x4040801)

09:24:24 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fcdbdf253d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400050000000000000011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c746963617374000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000e000100a6227464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x4054)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept4$bt_l2cap(r1, &(0x7f00000005c0)={0x1f, 0x0, @none}, &(0x7f0000000600)=0xe, 0x800)

09:24:24 executing program 0:
openat$vcsa(0xffffffffffffff9c, 0x0, 0x12000, 0x0)

09:24:24 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0)

09:24:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x80000000}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x80000000}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x2, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='veth1_to_team\x00', 0x1000, 0xb5, 0x7})
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:24:24 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040))
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x6)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
socket$inet(0x2, 0x5, 0x2)

09:24:24 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040))
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x6)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@local, @in6=@initdev}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000200)=0xe8)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1)

09:24:24 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept4$bt_l2cap(r1, &(0x7f00000005c0)={0x1f, 0x0, @none}, &(0x7f0000000600)=0xe, 0x800)

09:24:24 executing program 0:
openat$vcsa(0xffffffffffffff9c, 0x0, 0x12000, 0x0)

09:24:24 executing program 4:
syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff)

09:24:24 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040))
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x6)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@local, @in6=@initdev}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000200)=0xe8)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1)

09:24:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x80000000}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x80000000}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x2, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='veth1_to_team\x00', 0x1000, 0xb5, 0x7})

09:24:24 executing program 5:
openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept4$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @none}, &(0x7f0000000600)=0xe, 0x800)

09:24:24 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040))
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x6)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet(0x2, 0x5, 0x2)

09:24:24 executing program 0:
openat$vcsa(0xffffffffffffff9c, 0x0, 0x12000, 0x0)

09:24:24 executing program 4:
syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff)

09:24:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x80000000}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x80000000}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x2, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='veth1_to_team\x00', 0x1000, 0xb5, 0x7})

09:24:24 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040))
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x6)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1)

09:24:24 executing program 3:
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x80000000}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x80000000}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x2, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='veth1_to_team\x00', 0x1000, 0xb5, 0x7})

09:24:24 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept4$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @none}, &(0x7f0000000600)=0xe, 0x800)

09:24:24 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

09:24:24 executing program 4:
syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff)

09:24:24 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040))
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x6)
socket$inet(0x2, 0x5, 0x2)

09:24:24 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040))
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x6)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1)

09:24:24 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

09:24:24 executing program 3:
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x80000000}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x80000000}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x2, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='veth1_to_team\x00', 0x1000, 0xb5, 0x7})

09:24:24 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
accept4$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @none}, &(0x7f0000000600)=0xe, 0x800)

09:24:24 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0)

09:24:24 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040))
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x6)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff)

09:24:24 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

09:24:24 executing program 3:
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x80000000}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x80000000}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x2, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='veth1_to_team\x00', 0x1000, 0xb5, 0x7})

09:24:24 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040))
socket$inet(0x2, 0x5, 0x2)

09:24:24 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
accept4$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @none}, &(0x7f0000000600)=0xe, 0x800)

09:24:25 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0)

09:24:25 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040))
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x6)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff)

09:24:25 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x80000000}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x80000000}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x2, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='veth1_to_team\x00', 0x1000, 0xb5, 0x7})

09:24:25 executing program 0:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040))
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x6)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1)

09:24:25 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
accept4$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @none}, &(0x7f0000000600)=0xe, 0x800)

09:24:25 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0)

09:24:25 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040))
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x6)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff)

09:24:25 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x80000000}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x80000000}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x2, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='veth1_to_team\x00', 0x1000, 0xb5, 0x7})

09:24:25 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
socket$inet(0x2, 0x5, 0x2)

09:24:25 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x80000000}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x80000000}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x2, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='veth1_to_team\x00', 0x1000, 0xb5, 0x7})
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:24:25 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0)

09:24:25 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x0, @none}, &(0x7f0000000600)=0xe, 0x800)

09:24:25 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040))
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1)

09:24:25 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x80000000}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x80000000}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x2, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='veth1_to_team\x00', 0x1000, 0xb5, 0x7})

09:24:25 executing program 0:
r0 = socket(0x25, 0x6, 0x101)
sendmsg$nl_xfrm(r0, &(0x7f00000075c0)={&(0x7f00000074c0), 0xc, &(0x7f0000007580)={&(0x7f0000007500)=@flushsa={0x74, 0x1c, 0x1, 0x70bd27, 0x25dfdbfb, {0xff}, [@lifetime_val={0x24, 0x9, {0x9, 0x204c, 0xd532, 0x5}}, @lastused={0xc, 0xf, 0xc9e9}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd29, 0x70bd27, 0x70bd29, 0x70bd2c, 0x5, [0x2ca1, 0x6, 0x1, 0x8, 0xfffffff8]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:24:25 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0)

09:24:25 executing program 1:
openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$inet(0x2, 0x5, 0x2)

09:24:25 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x0, @none}, &(0x7f0000000600)=0xe, 0x800)

09:24:25 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1)

09:24:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0)

09:24:25 executing program 0:
r0 = socket(0x25, 0x6, 0x101)
sendmsg$nl_xfrm(r0, &(0x7f00000075c0)={&(0x7f00000074c0), 0xc, &(0x7f0000007580)={&(0x7f0000007500)=@flushsa={0x74, 0x1c, 0x1, 0x70bd27, 0x25dfdbfb, {0xff}, [@lifetime_val={0x24, 0x9, {0x9, 0x204c, 0xd532, 0x5}}, @lastused={0xc, 0xf, 0xc9e9}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd29, 0x70bd27, 0x70bd29, 0x70bd2c, 0x5, [0x2ca1, 0x6, 0x1, 0x8, 0xfffffff8]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:24:25 executing program 2:
openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0)

09:24:25 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0)

09:24:25 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x0, @none}, &(0x7f0000000600)=0xe, 0x800)

09:24:25 executing program 1:
socket$inet(0x2, 0x5, 0x2)

09:24:25 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
socket$inet(0x2, 0x5, 0x2)

09:24:25 executing program 0:
r0 = socket(0x25, 0x6, 0x101)
sendmsg$nl_xfrm(r0, &(0x7f00000075c0)={&(0x7f00000074c0), 0xc, &(0x7f0000007580)={&(0x7f0000007500)=@flushsa={0x74, 0x1c, 0x1, 0x70bd27, 0x25dfdbfb, {0xff}, [@lifetime_val={0x24, 0x9, {0x9, 0x204c, 0xd532, 0x5}}, @lastused={0xc, 0xf, 0xc9e9}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd29, 0x70bd27, 0x70bd29, 0x70bd2c, 0x5, [0x2ca1, 0x6, 0x1, 0x8, 0xfffffff8]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:24:25 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0)

09:24:25 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
syz_genetlink_get_family_id$devlink(0x0, r0)

09:24:25 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000600), 0x800)

09:24:26 executing program 0:
r0 = socket(0x25, 0x6, 0x101)
sendmsg$nl_xfrm(r0, &(0x7f00000075c0)={&(0x7f00000074c0), 0xc, &(0x7f0000007580)={&(0x7f0000007500)=@flushsa={0x74, 0x1c, 0x1, 0x70bd27, 0x25dfdbfb, {0xff}, [@lifetime_val={0x24, 0x9, {0x9, 0x204c, 0xd532, 0x5}}, @lastused={0xc, 0xf, 0xc9e9}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd29, 0x70bd27, 0x70bd29, 0x70bd2c, 0x5, [0x2ca1, 0x6, 0x1, 0x8, 0xfffffff8]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000)

09:24:26 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
syz_genetlink_get_family_id$devlink(0x0, r0)

09:24:26 executing program 1:
socket$inet(0x2, 0x0, 0x2)

09:24:26 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x800)

09:24:26 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
socket$inet(0x2, 0x5, 0x2)

09:24:26 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0)

09:24:26 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
syz_genetlink_get_family_id$devlink(0x0, r0)

09:24:26 executing program 0:
socket(0x25, 0x6, 0x101)

09:24:26 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)

09:24:26 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0)

09:24:26 executing program 1:
socket$inet(0x2, 0x0, 0x2)

09:24:26 executing program 4:
openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff)

09:24:26 executing program 0:
socket(0x0, 0x6, 0x101)

09:24:26 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
socket$inet(0x2, 0x5, 0x2)

09:24:26 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000600), 0x800)

09:24:26 executing program 4:
openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff)

09:24:26 executing program 0:
socket(0x0, 0x6, 0x101)

09:24:26 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0)

09:24:26 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0)

09:24:26 executing program 3:
openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$inet(0x2, 0x5, 0x2)

09:24:26 executing program 4:
openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff)

09:24:26 executing program 1:
socket$inet(0x2, 0x0, 0x2)

09:24:26 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_genetlink_get_family_id$devlink(0x0, r0)

09:24:26 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
socket$inet(0x2, 0x5, 0x2)

09:24:26 executing program 0:
socket(0x0, 0x6, 0x101)

09:24:26 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_genetlink_get_family_id$devlink(0x0, r0)

09:24:26 executing program 3:
socket$inet(0x2, 0x5, 0x2)

09:24:26 executing program 0:
socket(0x25, 0x0, 0x101)

09:24:26 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
socket$inet(0x2, 0x5, 0x2)

09:24:27 executing program 1:
socket$inet(0x2, 0x5, 0x0)

09:24:27 executing program 5:
r0 = syz_io_uring_complete(0x0)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1)
socket(0x9, 0x5, 0x7)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:24:27 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_genetlink_get_family_id$devlink(0x0, r0)

09:24:27 executing program 0:
socket(0x25, 0x0, 0x0)

09:24:27 executing program 1:
socket$inet(0x2, 0x5, 0x0)

09:24:27 executing program 3:
socket$inet(0x2, 0x0, 0x2)

09:24:27 executing program 4:
socket$inet(0x2, 0x5, 0x0)

09:24:27 executing program 5:
r0 = syz_io_uring_complete(0x0)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1)
socket(0x9, 0x5, 0x7)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:24:27 executing program 2:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff)

09:24:27 executing program 0:
fanotify_init(0x40, 0x4793093b34631fe)
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@caif=@util, &(0x7f0000000080)=0x80)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x2)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, 0x0)

09:24:27 executing program 1:
socket$inet(0x2, 0x5, 0x0)

09:24:27 executing program 4:
socket$inet(0x2, 0x5, 0x0)

09:24:27 executing program 5:
r0 = syz_io_uring_complete(0x0)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1)
socket(0x9, 0x5, 0x7)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:24:27 executing program 2:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff)

09:24:27 executing program 0:
fanotify_init(0x40, 0x4793093b34631fe)
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@caif=@util, &(0x7f0000000080)=0x80)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x2)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, 0x0)

09:24:27 executing program 4:
socket$inet(0x2, 0x5, 0x0)

09:24:27 executing program 1:
socket$inet(0x2, 0x5, 0x0)

09:24:27 executing program 3:
socket$inet(0x2, 0x0, 0x2)

09:24:27 executing program 2:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff)

09:24:27 executing program 4:
socket$inet(0x2, 0x0, 0x0)

09:24:27 executing program 5:
r0 = syz_io_uring_complete(0x0)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1)
socket(0x9, 0x5, 0x7)

09:24:27 executing program 1:
socket$inet(0x2, 0x5, 0x0)

09:24:27 executing program 0:
fanotify_init(0x40, 0x4793093b34631fe)
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@caif=@util, &(0x7f0000000080)=0x80)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x2)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, 0x0)

09:24:27 executing program 3:
socket$inet(0x2, 0x0, 0x2)

09:24:27 executing program 0:
fanotify_init(0x40, 0x4793093b34631fe)
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@caif=@util, &(0x7f0000000080)=0x80)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x2)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)

09:24:27 executing program 2:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff)

09:24:27 executing program 1:
socket$inet(0x2, 0x5, 0x0)

09:24:27 executing program 5:
syz_io_uring_complete(0x0)
socket(0x9, 0x5, 0x7)

09:24:27 executing program 2:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, &(0x7f0000000500)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/105, 0x69}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000140)}, {&(0x7f0000000180)=""/11, 0xb}, {&(0x7f00000001c0)=""/140, 0x8c}, {&(0x7f0000000280)=""/3, 0x3}, {&(0x7f00000002c0)=""/89, 0x59}, {&(0x7f0000000340)=""/58, 0x3a}, {&(0x7f0000000380)=""/4, 0x4}], 0x9, &(0x7f0000000480)=""/119, 0x77}, 0x2)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000580)={0x0, @isdn={0x22, 0x4, 0x8, 0x92, 0x2}, @nl=@unspec, @nl=@kern={0x10, 0x0, 0x0, 0x22840000}, 0x8, 0x0, 0x0, 0x0, 0x100, &(0x7f0000000540)='batadv_slave_0\x00', 0x0, 0x101, 0x8})
r2 = fork()
getpgrp(r2)
bind$can_raw(r0, &(0x7f0000000600), 0x10)
getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000640), &(0x7f0000000680)=0x4)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000006c0)={0xffff8001}, 0x4)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000700), 0x400900, 0x0)
accept(r0, &(0x7f0000000740)=@un=@abs, &(0x7f00000007c0)=0x80)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000800)={0x1})
accept(r1, &(0x7f0000000840)=@sco, &(0x7f00000008c0)=0x80)

09:24:27 executing program 0:
fanotify_init(0x40, 0x4793093b34631fe)
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@caif=@util, &(0x7f0000000080)=0x80)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x2)

09:24:27 executing program 5:
socket(0x9, 0x5, 0x7)

09:24:28 executing program 4:
socket$inet(0x2, 0x0, 0x0)

09:24:28 executing program 3:
socket$inet(0x2, 0x5, 0x0)

09:24:28 executing program 1:
socket$inet(0x2, 0x0, 0x0)

09:24:28 executing program 5:
socket(0x0, 0x5, 0x7)

09:24:28 executing program 0:
fanotify_init(0x40, 0x4793093b34631fe)
accept(0xffffffffffffffff, &(0x7f0000000000)=@caif=@util, &(0x7f0000000080)=0x80)

09:24:28 executing program 3:
socket$inet(0x2, 0x5, 0x0)

09:24:28 executing program 1:
socket$inet(0x2, 0x0, 0x0)

09:24:28 executing program 5:
socket(0x0, 0x5, 0x7)

09:24:28 executing program 4:
socket$inet(0x2, 0x0, 0x0)

09:24:28 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
io_uring_setup(0x439c, &(0x7f0000000000)={0x0, 0xabb0, 0x10, 0x3, 0x2c, 0x0, r0})

09:24:28 executing program 0:
fanotify_init(0x40, 0x4793093b34631fe)

09:24:28 executing program 3:
socket$inet(0x2, 0x5, 0x0)

09:24:28 executing program 5:
socket(0x0, 0x5, 0x7)

09:24:28 executing program 1:
socket$inet(0x2, 0x0, 0x0)

09:24:28 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000004840)={0x0, @xdp={0x2c, 0x4, 0x0, 0x34}, @rc={0x1f, @none, 0x99}, @xdp={0x2c, 0x2, <r1=>0x0, 0x24}, 0x8, 0x0, 0x0, 0x0, 0xa1b3, &(0x7f0000004800)='wg1\x00', 0xd, 0x6, 0x1f})
bind$can_raw(r0, &(0x7f00000048c0)={0x1d, r1}, 0x10)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
socket$inet(0x2, 0x5, 0x1)

09:24:28 executing program 3:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0xe, 0x0)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xfc, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x59a}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7895}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x1}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)

09:24:29 executing program 0:
fanotify_init(0x0, 0x4793093b34631fe)

09:24:29 executing program 5:
socket(0x9, 0x0, 0x7)

09:24:29 executing program 4:
r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@tipc=@name, &(0x7f0000001480)=0xffffffffffffff9e)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001600)={&(0x7f0000001500)={0xd0, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20008080}, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x80, @any, 0xb9fc, 0x2}, 0xe)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f00000000c0))

09:24:29 executing program 3:
userfaultfd(0x80000)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x682, 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=0x30)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000100)=0x200, &(0x7f0000000140)=0x4)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x3}, {0x1, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x38)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000200)={0x5, 0x21f3, 0x2, 0x81, 0x6, 0x9, 0x7}, 0xc)
r3 = syz_open_dev$binderN(&(0x7f0000000240), 0x0, 0x802)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@flat=@handle={0x73682a85, 0x110b, 0x1}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/177, 0xb1, 0x1, 0x26}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}}], 0x55, 0x0, &(0x7f00000004c0)="7b5438a4b0dd9464c284fb980d9c73a209db69dbb4c39558d665283a1214fa7bb7368f90eada4618c934a62fb1e2e478cb3c7a59b01dff786a58c0e9b0d3127000a23af060bcda892ab22f6c37bb72ca16b15ca824"})
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000580)={0xaa, 0x50})
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000005c0)=0x10, 0x4)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000600)=[{{0x1, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x1}, {0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4}}], 0x20)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000640)=0x7, 0x4)
ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000680))

09:24:29 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0)
syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0xd7cab7f56d7c791c)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
setsockopt$inet6_dccp_int(r1, 0x21, 0xb, &(0x7f0000001580), 0x4)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x109480, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x401, &(0x7f0000000100)=0x4)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4)
ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000001540))
setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f00000016c0)={{&(0x7f00000015c0)=""/155, 0x9b}, &(0x7f0000001680), 0x40}, 0x20)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x6200, 0x0)
recvmsg(r4, &(0x7f0000001500)={&(0x7f0000000180)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000200)=""/187, 0xbb}, {&(0x7f00000002c0)=""/17, 0x11}, {&(0x7f0000000300)=""/10, 0xa}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/28, 0x1c}, {&(0x7f0000001380)=""/14, 0xe}], 0x6, &(0x7f0000001440)=""/179, 0xb3}, 0x2001)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)

09:24:29 executing program 0:
fanotify_init(0x0, 0x0)

09:24:29 executing program 1:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

09:24:29 executing program 5:
socket(0x9, 0x0, 0x0)

09:24:29 executing program 0:
fanotify_init(0x0, 0x0)

09:24:29 executing program 4:
r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@tipc=@name, &(0x7f0000001480)=0xffffffffffffff9e)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001600)={&(0x7f0000001500)={0xd0, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20008080}, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x80, @any, 0xb9fc, 0x2}, 0xe)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f00000000c0))

09:24:29 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0)
syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0xd7cab7f56d7c791c)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
setsockopt$inet6_dccp_int(r1, 0x21, 0xb, &(0x7f0000001580), 0x4)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x109480, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x401, &(0x7f0000000100)=0x4)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4)
ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000001540))
setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f00000016c0)={{&(0x7f00000015c0)=""/155, 0x9b}, &(0x7f0000001680), 0x40}, 0x20)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x6200, 0x0)
recvmsg(r4, &(0x7f0000001500)={&(0x7f0000000180)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000200)=""/187, 0xbb}, {&(0x7f00000002c0)=""/17, 0x11}, {&(0x7f0000000300)=""/10, 0xa}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/28, 0x1c}, {&(0x7f0000001380)=""/14, 0xe}], 0x6, &(0x7f0000001440)=""/179, 0xb3}, 0x2001)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)

09:24:29 executing program 3:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

09:24:29 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000240), 0x0, 0x0)
r1 = socket(0xf, 0x8, 0x5)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000004c0)="7b5438a4b0dd9464c284fb980d9c73a209db69dbb4c39558d665283a1214fa7bb7368f90eada4618c934a62fb1e2e478cb3c7a59b01dff786a58c0e9b0d3127000a23af060bcda892ab22f6c37bb72ca"})
setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000040), 0x4)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x2c)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000000)=0xa7, 0x1)

09:24:29 executing program 0:
fanotify_init(0x0, 0x0)

09:24:29 executing program 4:
r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@tipc=@name, &(0x7f0000001480)=0xffffffffffffff9e)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001600)={&(0x7f0000001500)={0xd0, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20008080}, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x80, @any, 0xb9fc, 0x2}, 0xe)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f00000000c0))

09:24:29 executing program 0:
userfaultfd(0x80000)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x682, 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=0x30)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000100)=0x200, &(0x7f0000000140)=0x4)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x3}, {0x1, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x38)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000200)={0x5, 0x21f3, 0x2, 0x81, 0x6, 0x9, 0x7}, 0xc)
r3 = syz_open_dev$binderN(&(0x7f0000000240), 0x0, 0x802)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@flat=@handle={0x73682a85, 0x110b, 0x1}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/177, 0xb1, 0x1, 0x26}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}}], 0x55, 0x0, &(0x7f00000004c0)="7b5438a4b0dd9464c284fb980d9c73a209db69dbb4c39558d665283a1214fa7bb7368f90eada4618c934a62fb1e2e478cb3c7a59b01dff786a58c0e9b0d3127000a23af060bcda892ab22f6c37bb72ca16b15ca824"})
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000580)={0xaa, 0x50})
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000005c0)=0x10, 0x4)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000600)=[{{0x1, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x1}, {0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4}}], 0x20)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000640)=0x7, 0x4)
ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000680))

09:24:29 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0)
syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0xd7cab7f56d7c791c)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
setsockopt$inet6_dccp_int(r1, 0x21, 0xb, &(0x7f0000001580), 0x4)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x109480, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x401, &(0x7f0000000100)=0x4)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4)
ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000001540))
setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f00000016c0)={{&(0x7f00000015c0)=""/155, 0x9b}, &(0x7f0000001680), 0x40}, 0x20)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x6200, 0x0)
recvmsg(r4, &(0x7f0000001500)={&(0x7f0000000180)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000200)=""/187, 0xbb}, {&(0x7f00000002c0)=""/17, 0x11}, {&(0x7f0000000300)=""/10, 0xa}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/28, 0x1c}, {&(0x7f0000001380)=""/14, 0xe}], 0x6, &(0x7f0000001440)=""/179, 0xb3}, 0x2001)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)

09:24:29 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000240), 0x0, 0x0)
r1 = socket(0xf, 0x8, 0x5)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000004c0)="7b5438a4b0dd9464c284fb980d9c73a209db69dbb4c39558d665283a1214fa7bb7368f90eada4618c934a62fb1e2e478cb3c7a59b01dff786a58c0e9b0d3127000a23af060bcda892ab22f6c37bb72ca"})
setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000040), 0x4)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x2c)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000000)=0xa7, 0x1)

[  929.805592][  T388] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  929.935355][    T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  930.335116][  T388] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  930.344251][  T388] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  930.353150][  T388] usb 2-1: Product: syz
[  930.357788][  T388] usb 2-1: Manufacturer: syz
[  930.362444][  T388] usb 2-1: SerialNumber: syz
[  930.407049][  T388] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  930.485164][    T8] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  930.494341][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  930.503240][    T8] usb 4-1: Product: syz
[  930.507884][    T8] usb 4-1: Manufacturer: syz
[  930.512477][    T8] usb 4-1: SerialNumber: syz
[  930.556012][    T8] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  930.985147][  T388] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  931.125110][    T8] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  931.206118][ T3228] ieee802154 phy0 wpan0: encryption failed: -22
[  931.206409][T29862] usb 2-1: USB disconnect, device number 2
[  931.212439][ T3228] ieee802154 phy1 wpan1: encryption failed: -22
[  931.343100][    T5] usb 4-1: USB disconnect, device number 2
09:24:31 executing program 1:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

09:24:31 executing program 0:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)

09:24:31 executing program 4:
r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@tipc=@name, &(0x7f0000001480)=0xffffffffffffff9e)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001600)={&(0x7f0000001500)={0xd0, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20008080}, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x80, @any, 0xb9fc, 0x2}, 0xe)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)

09:24:31 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0)
syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0xd7cab7f56d7c791c)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
setsockopt$inet6_dccp_int(r1, 0x21, 0xb, &(0x7f0000001580), 0x4)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x109480, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x401, &(0x7f0000000100)=0x4)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4)
ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000001540))
setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f00000016c0)={{&(0x7f00000015c0)=""/155, 0x9b}, &(0x7f0000001680), 0x40}, 0x20)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x6200, 0x0)
recvmsg(r4, &(0x7f0000001500)={&(0x7f0000000180)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000200)=""/187, 0xbb}, {&(0x7f00000002c0)=""/17, 0x11}, {&(0x7f0000000300)=""/10, 0xa}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/28, 0x1c}, {&(0x7f0000001380)=""/14, 0xe}], 0x6, &(0x7f0000001440)=""/179, 0xb3}, 0x2001)

09:24:31 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000240), 0x0, 0x0)
r1 = socket(0xf, 0x8, 0x5)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000004c0)="7b5438a4b0dd9464c284fb980d9c73a209db69dbb4c39558d665283a1214fa7bb7368f90eada4618c934a62fb1e2e478cb3c7a59b01dff786a58c0e9b0d3127000a23af060bcda892ab22f6c37bb72ca"})
setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000040), 0x4)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x2c)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000000)=0xa7, 0x1)

09:24:31 executing program 3:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

09:24:31 executing program 4:
r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@tipc=@name, &(0x7f0000001480)=0xffffffffffffff9e)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001600)={&(0x7f0000001500)={0xd0, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20008080}, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x80, @any, 0xb9fc, 0x2}, 0xe)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

09:24:31 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0)
syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0xd7cab7f56d7c791c)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
setsockopt$inet6_dccp_int(r1, 0x21, 0xb, &(0x7f0000001580), 0x4)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x109480, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x401, &(0x7f0000000100)=0x4)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4)
ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000001540))
setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f00000016c0)={{&(0x7f00000015c0)=""/155, 0x9b}, &(0x7f0000001680), 0x40}, 0x20)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x6200, 0x0)

09:24:31 executing program 0:
userfaultfd(0x80000)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x682, 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=0x30)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000100)=0x200, &(0x7f0000000140)=0x4)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x3}, {0x1, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x38)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000200)={0x5, 0x21f3, 0x2, 0x81, 0x6, 0x9, 0x7}, 0xc)
r3 = syz_open_dev$binderN(&(0x7f0000000240), 0x0, 0x802)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@flat=@handle={0x73682a85, 0x110b, 0x1}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/177, 0xb1, 0x1, 0x26}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}}], 0x55, 0x0, &(0x7f00000004c0)="7b5438a4b0dd9464c284fb980d9c73a209db69dbb4c39558d665283a1214fa7bb7368f90eada4618c934a62fb1e2e478cb3c7a59b01dff786a58c0e9b0d3127000a23af060bcda892ab22f6c37bb72ca16b15ca824"})
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000580)={0xaa, 0x50})
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000005c0)=0x10, 0x4)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000600)=[{{0x1, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4}}], 0x20)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000640)=0x7, 0x4)
ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000680))

09:24:31 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000240), 0x0, 0x0)
r1 = socket(0xf, 0x8, 0x5)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000004c0)="7b5438a4b0dd9464c284fb980d9c73a209db69dbb4c39558d665283a1214fa7bb7368f90eada4618c934a62fb1e2e478cb3c7a59b01dff786a58c0e9b0d3127000a23af060bcda892ab22f6c37bb72ca"})
setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000040), 0x4)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x2c)

09:24:31 executing program 4:
r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@tipc=@name, &(0x7f0000001480)=0xffffffffffffff9e)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001600)={&(0x7f0000001500)={0xd0, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20008080}, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x80, @any, 0xb9fc, 0x2}, 0xe)

09:24:31 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0)
syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0xd7cab7f56d7c791c)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
setsockopt$inet6_dccp_int(r1, 0x21, 0xb, &(0x7f0000001580), 0x4)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x109480, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x401, &(0x7f0000000100)=0x4)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4)
ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000001540))
setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f00000016c0)={{&(0x7f00000015c0)=""/155, 0x9b}, &(0x7f0000001680), 0x40}, 0x20)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x6200, 0x0)

[  932.005029][  T388] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  932.019051][  T388] ath9k_htc: Failed to initialize the device
[  932.063677][T29862] usb 2-1: ath9k_htc: USB layer deinitialized
[  932.164967][    T8] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  932.174581][    T8] ath9k_htc: Failed to initialize the device
[  932.199574][    T5] usb 4-1: ath9k_htc: USB layer deinitialized
[  932.485099][T29862] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  932.574876][    T5] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  933.055249][T29862] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  933.064514][T29862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  933.073700][T29862] usb 2-1: Product: syz
[  933.078881][T29862] usb 2-1: Manufacturer: syz
[  933.083481][T29862] usb 2-1: SerialNumber: syz
[  933.095294][    T5] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  933.105020][    T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  933.113192][    T5] usb 4-1: Product: syz
[  933.117856][    T5] usb 4-1: Manufacturer: syz
[  933.122482][    T5] usb 4-1: SerialNumber: syz
[  933.136010][T29862] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  933.166045][    T5] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  933.744889][    T5] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  933.854953][   T20] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  933.963504][  T388] usb 4-1: USB disconnect, device number 3
[  934.074126][T29862] usb 2-1: USB disconnect, device number 3
09:24:34 executing program 1:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

09:24:34 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000240), 0x0, 0x0)
r1 = socket(0xf, 0x8, 0x5)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000004c0)="7b5438a4b0dd9464c284fb980d9c73a209db69dbb4c39558d665283a1214fa7bb7368f90eada4618c934a62fb1e2e478cb3c7a59b01dff786a58c0e9b0d3127000a23af060bcda892ab22f6c37bb72ca"})
setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000040), 0x4)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)

09:24:34 executing program 0:
r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@tipc=@name, &(0x7f0000001480)=0xffffffffffffff9e)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001600)={&(0x7f0000001500)={0xd0, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20008080}, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x80, @any, 0xb9fc, 0x2}, 0xe)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

09:24:34 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0)
syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0xd7cab7f56d7c791c)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
setsockopt$inet6_dccp_int(r1, 0x21, 0xb, &(0x7f0000001580), 0x4)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x109480, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x401, &(0x7f0000000100)=0x4)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4)
ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000001540))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x6200, 0x0)

09:24:34 executing program 4:
r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@tipc=@name, &(0x7f0000001480)=0xffffffffffffff9e)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001600)={&(0x7f0000001500)={0xd0, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20008080}, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x80, @any, 0xb9fc, 0x2}, 0xe)

09:24:34 executing program 3:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

09:24:34 executing program 0:
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000040)=0x18)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
r1 = socket(0x2, 0x3, 0x1)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001940)={0x0, @can={0x1d, <r2=>0x0}, @generic={0x2, "d05437335a3ac31b4912f8ac086a"}, @tipc=@name={0x1e, 0x2, 0x2, {{0x2, 0x1}, 0x5}}, 0x1, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001900)='ip6gretap0\x00', 0x8000, 0x2, 0x1ff})
bind$can_raw(r1, &(0x7f00000019c0)={0x1d, r2}, 0x10)

09:24:34 executing program 4:
r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@tipc=@name, &(0x7f0000001480)=0xffffffffffffff9e)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001600)={&(0x7f0000001500)={0xd0, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20008080}, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x80, @any, 0xb9fc, 0x2}, 0xe)

09:24:34 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0)
syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0xd7cab7f56d7c791c)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
setsockopt$inet6_dccp_int(r1, 0x21, 0xb, &(0x7f0000001580), 0x4)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x109480, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x401, &(0x7f0000000100)=0x4)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x6200, 0x0)

09:24:34 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000240), 0x0, 0x0)
r1 = socket(0xf, 0x8, 0x5)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000004c0)="7b5438a4b0dd9464c284fb980d9c73a209db69dbb4c39558d665283a1214fa7bb7368f90eada4618c934a62fb1e2e478cb3c7a59b01dff786a58c0e9b0d3127000a23af060bcda892ab22f6c37bb72ca"})
setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000040), 0x4)

[  934.804952][    T5] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  934.816962][    T5] ath9k_htc: Failed to initialize the device
[  934.848115][  T388] usb 4-1: ath9k_htc: USB layer deinitialized
09:24:34 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0)
syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0xd7cab7f56d7c791c)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
setsockopt$inet6_dccp_int(r1, 0x21, 0xb, &(0x7f0000001580), 0x4)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x109480, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x401, &(0x7f0000000100)=0x4)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x6200, 0x0)

09:24:34 executing program 4:
r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@tipc=@name, &(0x7f0000001480)=0xffffffffffffff9e)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001600)={&(0x7f0000001500)={0xd0, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20008080}, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x80, @any, 0xb9fc, 0x2}, 0xe)

[  934.895394][   T20] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  934.902684][   T20] ath9k_htc: Failed to initialize the device
[  934.953823][T29862] usb 2-1: ath9k_htc: USB layer deinitialized
[  935.218745][  T388] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  935.354871][T29862] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  935.754801][  T388] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  935.763863][  T388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  935.772603][  T388] usb 4-1: Product: syz
[  935.777207][  T388] usb 4-1: Manufacturer: syz
[  935.781796][  T388] usb 4-1: SerialNumber: syz
[  935.825399][  T388] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  935.936252][T29862] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  935.945372][T29862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  935.953345][T29862] usb 2-1: Product: syz
[  935.958009][T29862] usb 2-1: Manufacturer: syz
[  935.962620][T29862] usb 2-1: SerialNumber: syz
[  936.015791][T29862] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  936.394898][  T388] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  936.611526][   T20] usb 4-1: USB disconnect, device number 4
[  936.714706][T29862] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  936.934634][ T3789] usb 2-1: USB disconnect, device number 4
09:24:37 executing program 1:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:24:37 executing program 0:
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000040)=0x18)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
r1 = socket(0x2, 0x3, 0x1)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001940)={0x0, @can={0x1d, <r2=>0x0}, @generic={0x2, "d05437335a3ac31b4912f8ac086a"}, @tipc=@name={0x1e, 0x2, 0x2, {{0x2, 0x1}, 0x5}}, 0x1, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001900)='ip6gretap0\x00', 0x8000, 0x2, 0x1ff})
bind$can_raw(r1, &(0x7f00000019c0)={0x1d, r2}, 0x10)

09:24:37 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000240), 0x0, 0x0)
r1 = socket(0xf, 0x8, 0x5)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000004c0)="7b5438a4b0dd9464c284fb980d9c73a209db69dbb4c39558d665283a1214fa7bb7368f90eada4618c934a62fb1e2e478cb3c7a59b01dff786a58c0e9b0d3127000a23af060bcda892ab22f6c37bb72ca"})

09:24:37 executing program 4:
r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@tipc=@name, &(0x7f0000001480)=0xffffffffffffff9e)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001600)={&(0x7f0000001500)={0xd0, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20008080}, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x80, @any, 0xb9fc, 0x2}, 0xe)

09:24:37 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0)
syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0xd7cab7f56d7c791c)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
setsockopt$inet6_dccp_int(r1, 0x21, 0xb, &(0x7f0000001580), 0x4)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x109480, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x401, &(0x7f0000000100)=0x4)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x6200, 0x0)

09:24:37 executing program 3:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[  937.454618][  T388] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  937.461613][  T388] ath9k_htc: Failed to initialize the device
[  937.519238][   T20] usb 4-1: ath9k_htc: USB layer deinitialized
09:24:37 executing program 4:
r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@tipc=@name, &(0x7f0000001480)=0xffffffffffffff9e)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001600)={&(0x7f0000001500)={0xd0, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20008080}, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x80, @any, 0xb9fc, 0x2}, 0xe)

09:24:37 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0)
syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0xd7cab7f56d7c791c)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
setsockopt$inet6_dccp_int(r1, 0x21, 0xb, &(0x7f0000001580), 0x4)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x109480, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x401, &(0x7f0000000100)=0x4)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x6200, 0x0)

09:24:37 executing program 0:
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000040)=0x18)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
r1 = socket(0x2, 0x3, 0x1)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001940)={0x0, @can={0x1d, <r2=>0x0}, @generic={0x2, "d05437335a3ac31b4912f8ac086a"}, @tipc=@name={0x1e, 0x2, 0x2, {{0x2, 0x1}, 0x5}}, 0x1, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001900)='ip6gretap0\x00', 0x8000, 0x2, 0x1ff})
bind$can_raw(r1, &(0x7f00000019c0)={0x1d, r2}, 0x10)

09:24:37 executing program 5:
syz_open_dev$binderN(&(0x7f0000000240), 0x0, 0x0)
r0 = socket(0xf, 0x8, 0x5)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)

09:24:37 executing program 1:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:24:37 executing program 0:
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000040)=0x18)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
r1 = socket(0x2, 0x3, 0x1)
bind$can_raw(r1, &(0x7f00000019c0), 0x10)

09:24:37 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0)
syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0xd7cab7f56d7c791c)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
setsockopt$inet6_dccp_int(r0, 0x21, 0xb, &(0x7f0000001580), 0x4)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x109480, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x6200, 0x0)

09:24:37 executing program 4:
accept(0xffffffffffffffff, &(0x7f0000000040)=@tipc=@name, &(0x7f0000001480)=0xffffffffffffff9e)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x80, @any, 0xb9fc, 0x2}, 0xe)

[  937.774711][T29862] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  937.783054][T29862] ath9k_htc: Failed to initialize the device
09:24:37 executing program 5:
syz_open_dev$binderN(&(0x7f0000000240), 0x0, 0x0)
socket(0xf, 0x8, 0x5)

[  937.837900][ T3789] usb 2-1: ath9k_htc: USB layer deinitialized
09:24:37 executing program 1:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:24:37 executing program 0:
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000040)=0x18)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
bind$can_raw(0xffffffffffffffff, &(0x7f00000019c0), 0x10)

[  937.984664][   T20] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  938.614766][   T20] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  938.623942][   T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  938.632358][   T20] usb 4-1: Product: syz
[  938.636930][   T20] usb 4-1: Manufacturer: syz
[  938.641523][   T20] usb 4-1: SerialNumber: syz
[  938.705256][   T20] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  939.284935][   T20] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  939.488807][ T1893] usb 4-1: USB disconnect, device number 5
09:24:39 executing program 3:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:24:39 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x80, @any, 0xb9fc, 0x2}, 0xe)

09:24:39 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0)
syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0xd7cab7f56d7c791c)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
setsockopt$inet6_dccp_int(r0, 0x21, 0xb, &(0x7f0000001580), 0x4)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x6200, 0x0)

09:24:39 executing program 5:
socket(0xf, 0x8, 0x5)

09:24:39 executing program 1:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

09:24:39 executing program 0:
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000040)=0x18)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
bind$can_raw(0xffffffffffffffff, &(0x7f00000019c0), 0x10)

09:24:39 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0)
syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0xd7cab7f56d7c791c)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x6200, 0x0)

09:24:39 executing program 5:
socket(0x0, 0x8, 0x5)

09:24:39 executing program 0:
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000040)=0x18)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
bind$can_raw(0xffffffffffffffff, &(0x7f00000019c0), 0x10)

09:24:39 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x80, @any, 0xb9fc, 0x2}, 0xe)

09:24:40 executing program 0:
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000040)=0x18)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
r0 = socket(0x2, 0x3, 0x1)
bind$can_raw(r0, &(0x7f00000019c0), 0x10)

09:24:40 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0)
syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0xd7cab7f56d7c791c)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x6200, 0x0)

[  940.334560][   T20] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  940.344359][   T20] ath9k_htc: Failed to initialize the device
[  940.364220][ T1893] usb 4-1: ath9k_htc: USB layer deinitialized
[  940.384530][    T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd
09:24:40 executing program 3:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:24:40 executing program 5:
socket(0x0, 0x8, 0x5)

09:24:40 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x80, @any, 0xb9fc, 0x2}, 0xe)

09:24:40 executing program 0:
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000040)=0x18)
r0 = socket(0x2, 0x3, 0x1)
bind$can_raw(r0, &(0x7f00000019c0), 0x10)

[  940.904844][    T8] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  940.914007][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  940.924976][    T8] usb 2-1: Product: syz
[  940.929141][    T8] usb 2-1: Manufacturer: syz
[  940.933775][    T8] usb 2-1: SerialNumber: syz
[  940.975560][    T8] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  941.544598][    T8] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  941.747963][ T3789] usb 2-1: USB disconnect, device number 5
09:24:42 executing program 1:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

09:24:42 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0)
syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0xd7cab7f56d7c791c)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x6200, 0x0)

09:24:42 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x80, @any, 0xb9fc, 0x2}, 0xe)

09:24:42 executing program 5:
socket(0x0, 0x8, 0x5)

09:24:42 executing program 0:
r0 = socket(0x2, 0x3, 0x1)
bind$can_raw(r0, &(0x7f00000019c0), 0x10)

09:24:42 executing program 3:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:24:42 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x6200, 0x0)

09:24:42 executing program 0:
r0 = socket(0x0, 0x3, 0x1)
bind$can_raw(r0, &(0x7f00000019c0), 0x10)

09:24:42 executing program 5:
socket(0xf, 0x0, 0x5)

09:24:42 executing program 4:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x80, @any, 0xb9fc, 0x2}, 0xe)

09:24:42 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x6200, 0x0)

09:24:42 executing program 0:
r0 = socket(0x0, 0x3, 0x1)
bind$can_raw(r0, &(0x7f00000019c0), 0x10)

[  942.564625][    T8] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  942.572181][    T8] ath9k_htc: Failed to initialize the device
[  942.600116][ T3789] usb 2-1: ath9k_htc: USB layer deinitialized
[  942.974551][ T3789] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  943.494595][ T3789] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  943.503691][ T3789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  943.512968][ T3789] usb 2-1: Product: syz
[  943.517796][ T3789] usb 2-1: Manufacturer: syz
[  943.522372][ T3789] usb 2-1: SerialNumber: syz
[  943.565400][ T3789] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  944.134459][ T3789] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  944.338459][T29862] usb 2-1: USB disconnect, device number 6
09:24:44 executing program 1:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

09:24:44 executing program 5:
socket(0xf, 0x0, 0x0)

09:24:44 executing program 4:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x80, @any, 0xb9fc, 0x2}, 0xe)

09:24:44 executing program 2:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x6200, 0x0)

09:24:44 executing program 0:
r0 = socket(0x0, 0x3, 0x1)
bind$can_raw(r0, &(0x7f00000019c0), 0x10)

09:24:44 executing program 3:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

09:24:44 executing program 2:
openat$vcsa(0xffffffffffffff9c, 0x0, 0x6200, 0x0)

09:24:44 executing program 4:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x80, @any, 0xb9fc, 0x2}, 0xe)

09:24:44 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

09:24:44 executing program 0:
r0 = socket(0x2, 0x0, 0x1)
bind$can_raw(r0, &(0x7f00000019c0), 0x10)

09:24:44 executing program 2:
openat$vcsa(0xffffffffffffff9c, 0x0, 0x6200, 0x0)

09:24:44 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)

[  945.174386][ T1893] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  945.214736][ T3789] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  945.232898][ T3789] ath9k_htc: Failed to initialize the device
[  945.248042][T29862] usb 2-1: ath9k_htc: USB layer deinitialized
[  945.344249][    T8] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  945.614256][T29862] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  945.774844][ T1893] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  945.783907][ T1893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  945.792231][ T1893] usb 4-1: Product: syz
[  945.796710][ T1893] usb 4-1: Manufacturer: syz
[  945.801311][ T1893] usb 4-1: SerialNumber: syz
[  945.854979][ T1893] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  945.934532][    T8] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  945.944543][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  945.952527][    T8] usb 6-1: Product: syz
[  945.959415][    T8] usb 6-1: Manufacturer: syz
[  945.964792][    T8] usb 6-1: SerialNumber: syz
[  946.005359][    T8] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  946.134251][T29862] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  946.143502][T29862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  946.153084][T29862] usb 2-1: Product: syz
[  946.157943][T29862] usb 2-1: Manufacturer: syz
[  946.162528][T29862] usb 2-1: SerialNumber: syz
[  946.205363][T29862] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  946.514315][  T388] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  946.694427][    T8] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  946.728332][    T5] usb 4-1: USB disconnect, device number 6
[  946.784414][T29862] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  946.911905][ T9657] usb 6-1: USB disconnect, device number 7
[  946.990931][   T20] usb 2-1: USB disconnect, device number 7
09:24:47 executing program 1:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:24:47 executing program 0:
r0 = socket(0x2, 0x0, 0x1)
bind$can_raw(r0, &(0x7f00000019c0), 0x10)

09:24:47 executing program 2:
openat$vcsa(0xffffffffffffff9c, 0x0, 0x6200, 0x0)

09:24:47 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)

09:24:47 executing program 3:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

09:24:47 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

09:24:47 executing program 2:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)

09:24:47 executing program 0:
r0 = socket(0x2, 0x0, 0x1)
bind$can_raw(r0, &(0x7f00000019c0), 0x10)

09:24:47 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)

09:24:47 executing program 2:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)

[  947.604190][  T388] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  947.624412][  T388] ath9k_htc: Failed to initialize the device
[  947.633154][    T5] usb 4-1: ath9k_htc: USB layer deinitialized
09:24:47 executing program 0:
r0 = socket(0x2, 0x3, 0x0)
bind$can_raw(r0, &(0x7f00000019c0), 0x10)

09:24:47 executing program 2:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)

[  947.764269][    T8] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  947.773977][    T8] ath9k_htc: Failed to initialize the device
[  947.793292][ T9657] usb 6-1: ath9k_htc: USB layer deinitialized
[  947.844681][T29862] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  947.854320][T29862] ath9k_htc: Failed to initialize the device
[  947.873618][   T20] usb 2-1: ath9k_htc: USB layer deinitialized
[  948.006980][    T5] usb 4-1: new high-speed USB device number 7 using dummy_hcd
09:24:47 executing program 1:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:24:47 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0xb9fc, 0x2}, 0xe)

09:24:47 executing program 0:
r0 = socket(0x2, 0x3, 0x0)
bind$can_raw(r0, &(0x7f00000019c0), 0x10)

09:24:47 executing program 2:
r0 = socket(0x2, 0x3, 0x0)
bind$can_raw(r0, &(0x7f00000019c0), 0x10)

[  948.194187][ T9657] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  948.534312][    T5] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  948.543472][    T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  948.552866][    T5] usb 4-1: Product: syz
[  948.557717][    T5] usb 4-1: Manufacturer: syz
[  948.562297][    T5] usb 4-1: SerialNumber: syz
[  948.615004][    T5] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  948.774430][ T9657] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  948.783514][ T9657] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  948.793037][ T9657] usb 6-1: Product: syz
[  948.798043][ T9657] usb 6-1: Manufacturer: syz
[  948.802654][ T9657] usb 6-1: SerialNumber: syz
[  948.854916][ T9657] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  949.184140][    T5] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  949.403412][   T20] usb 4-1: USB disconnect, device number 7
[  949.524157][ T9657] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  949.740990][T29862] usb 6-1: USB disconnect, device number 8
09:24:49 executing program 2:
r0 = socket(0x2, 0x3, 0x0)
bind$can_raw(r0, &(0x7f00000019c0), 0x10)

09:24:50 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

09:24:50 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe)

09:24:50 executing program 0:
r0 = socket(0x2, 0x3, 0x0)
bind$can_raw(r0, &(0x7f00000019c0), 0x10)

09:24:50 executing program 3:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

09:24:50 executing program 1:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:24:50 executing program 2:
r0 = socket(0x2, 0x3, 0x0)
bind$can_raw(r0, &(0x7f00000019c0), 0x10)

[  950.244182][    T5] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  950.251170][    T5] ath9k_htc: Failed to initialize the device
[  950.260086][   T20] usb 4-1: ath9k_htc: USB layer deinitialized
09:24:50 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000), 0xe)

09:24:50 executing program 0:
socket(0x2, 0x3, 0x1)
bind$can_raw(0xffffffffffffffff, &(0x7f00000019c0), 0x10)

09:24:50 executing program 2:
socket(0x2, 0x3, 0x0)

09:24:50 executing program 4:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

09:24:50 executing program 0:
socket(0x2, 0x3, 0x1)
bind$can_raw(0xffffffffffffffff, &(0x7f00000019c0), 0x10)

[  950.564168][ T9657] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  950.574249][ T9657] ath9k_htc: Failed to initialize the device
[  950.592491][T29862] usb 6-1: ath9k_htc: USB layer deinitialized
09:24:50 executing program 0:
socket(0x2, 0x3, 0x1)
bind$can_raw(0xffffffffffffffff, &(0x7f00000019c0), 0x10)

[  950.734314][   T20] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  950.904184][ T4609] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  950.974189][T29862] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  951.264171][   T20] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  951.273700][   T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  951.282510][   T20] usb 4-1: Product: syz
[  951.287160][   T20] usb 4-1: Manufacturer: syz
[  951.291768][   T20] usb 4-1: SerialNumber: syz
[  951.335677][   T20] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  951.434023][ T4609] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  951.443139][ T4609] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  951.452046][ T4609] usb 5-1: Product: syz
[  951.456711][ T4609] usb 5-1: Manufacturer: syz
[  951.461408][ T4609] usb 5-1: SerialNumber: syz
[  951.494124][T29862] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  951.503177][T29862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  951.513448][ T4609] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  951.537450][T29862] usb 6-1: Product: syz
[  951.541620][T29862] usb 6-1: Manufacturer: syz
[  951.554243][T29862] usb 6-1: SerialNumber: syz
[  951.594855][T29862] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  951.914189][   T20] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  952.124076][ T4609] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  952.139086][    T5] usb 4-1: USB disconnect, device number 8
[  952.174028][T29862] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  952.348769][    T8] usb 5-1: USB disconnect, device number 2
[  952.395596][ T9687] usb 6-1: USB disconnect, device number 9
09:24:52 executing program 5:

09:24:52 executing program 2:
socket(0x0, 0x3, 0x0)

09:24:52 executing program 0:
r0 = socket(0x2, 0x3, 0x1)
bind$can_raw(r0, 0x0, 0x0)

09:24:52 executing program 1:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

09:24:52 executing program 3:

09:24:52 executing program 4:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[  952.964525][   T20] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  952.971844][   T20] ath9k_htc: Failed to initialize the device
09:24:52 executing program 5:

09:24:52 executing program 3:

09:24:52 executing program 2:
socket(0x0, 0x3, 0x0)

[  953.023803][    T5] usb 4-1: ath9k_htc: USB layer deinitialized
09:24:52 executing program 0:
r0 = socket(0x2, 0x3, 0x1)
bind$can_raw(r0, 0x0, 0x0)

09:24:52 executing program 5:

09:24:52 executing program 3:

09:24:53 executing program 2:
socket(0x0, 0x3, 0x0)

[  953.203863][T29862] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  953.211322][ T4609] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  953.224575][ T4609] ath9k_htc: Failed to initialize the device
[  953.230984][T29862] ath9k_htc: Failed to initialize the device
09:24:53 executing program 0:
r0 = socket(0x2, 0x3, 0x1)
bind$can_raw(r0, 0x0, 0x0)

09:24:53 executing program 5:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

[  953.257121][    T8] usb 5-1: ath9k_htc: USB layer deinitialized
[  953.257426][ T9687] usb 6-1: ath9k_htc: USB layer deinitialized
[  953.316137][  T388] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  953.654630][    T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  953.954050][  T388] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  953.963141][  T388] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  953.972342][  T388] usb 2-1: Product: syz
[  953.977286][  T388] usb 2-1: Manufacturer: syz
[  953.981988][  T388] usb 2-1: SerialNumber: syz
[  954.044841][  T388] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  954.254036][    T8] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  954.263103][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  954.272248][    T8] usb 5-1: Product: syz
[  954.277367][    T8] usb 5-1: Manufacturer: syz
[  954.281967][    T8] usb 5-1: SerialNumber: syz
[  954.325245][    T8] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  954.684090][  T388] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  954.898118][ T4609] usb 2-1: USB disconnect, device number 8
[  954.933859][    T8] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  955.153540][ T1893] usb 5-1: USB disconnect, device number 3
09:24:55 executing program 1:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

09:24:55 executing program 3:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:24:55 executing program 4:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

09:24:55 executing program 5:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:24:55 executing program 0:
r0 = socket(0x2, 0x3, 0x1)
bind$can_raw(r0, 0x0, 0x0)

09:24:55 executing program 2:
socket(0x2, 0x0, 0x0)

[  955.763922][  T388] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  955.779667][  T388] ath9k_htc: Failed to initialize the device
09:24:55 executing program 0:
r0 = socket(0x2, 0x3, 0x1)
bind$can_raw(r0, 0x0, 0x0)

[  955.810089][ T4609] usb 2-1: ath9k_htc: USB layer deinitialized
09:24:55 executing program 2:
socket(0x2, 0x0, 0x0)

09:24:55 executing program 0:
r0 = socket(0x2, 0x3, 0x1)
bind$can_raw(r0, 0x0, 0x0)

09:24:55 executing program 3:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

[  956.004046][    T8] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  956.015153][    T8] ath9k_htc: Failed to initialize the device
[  956.033253][ T1893] usb 5-1: ath9k_htc: USB layer deinitialized
09:24:55 executing program 0:
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)

09:24:55 executing program 2:
socket(0x2, 0x0, 0x0)

[  956.174201][ T4609] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  956.403727][ T1893] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  956.773750][ T4609] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  956.782956][ T4609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  956.791067][ T4609] usb 2-1: Product: syz
[  956.795995][ T4609] usb 2-1: Manufacturer: syz
[  956.800700][ T4609] usb 2-1: SerialNumber: syz
[  956.854648][ T4609] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  956.933743][ T1893] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  956.943980][ T1893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  956.952172][ T1893] usb 5-1: Product: syz
[  956.958364][ T1893] usb 5-1: Manufacturer: syz
[  956.962952][ T1893] usb 5-1: SerialNumber: syz
[  957.004842][ T1893] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  957.573727][ T1893] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  957.573753][ T4609] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  957.791441][T29862] usb 5-1: USB disconnect, device number 4
[  957.822861][ T9687] usb 2-1: USB disconnect, device number 9
09:24:58 executing program 1:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

09:24:58 executing program 0:
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)

09:24:58 executing program 2:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:24:58 executing program 5:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:24:58 executing program 3:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:24:58 executing program 4:

09:24:58 executing program 4:

09:24:58 executing program 0:
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)

09:24:58 executing program 0:
r0 = socket(0x0, 0x3, 0x1)
bind$can_raw(r0, 0x0, 0x0)

09:24:58 executing program 4:

09:24:58 executing program 0:
r0 = socket(0x0, 0x3, 0x1)
bind$can_raw(r0, 0x0, 0x0)

09:24:58 executing program 4:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

[  958.643664][ T4609] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  958.654194][ T4609] ath9k_htc: Failed to initialize the device
[  958.659489][ T1893] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  958.674281][ T1893] ath9k_htc: Failed to initialize the device
[  958.686660][T29862] usb 5-1: ath9k_htc: USB layer deinitialized
[  958.694584][ T9687] usb 2-1: ath9k_htc: USB layer deinitialized
[  959.063677][ T9687] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  959.613671][ T9687] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  959.622723][ T9687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  959.631163][ T9687] usb 2-1: Product: syz
[  959.635746][ T9687] usb 2-1: Manufacturer: syz
[  959.640429][ T9687] usb 2-1: SerialNumber: syz
[  959.684343][ T9687] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  960.353616][ T9687] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  960.569446][ T1893] usb 2-1: USB disconnect, device number 10
09:25:00 executing program 1:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:25:00 executing program 0:
r0 = socket(0x0, 0x3, 0x1)
bind$can_raw(r0, 0x0, 0x0)

09:25:00 executing program 2:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:25:00 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)

09:25:00 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

09:25:00 executing program 4:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:25:00 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)

09:25:01 executing program 0:
r0 = socket(0x2, 0x0, 0x1)
bind$can_raw(r0, 0x0, 0x0)

09:25:01 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)

09:25:01 executing program 3:
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)

[  961.403517][  T388] usb 6-1: new high-speed USB device number 10 using dummy_hcd
09:25:01 executing program 0:
r0 = socket(0x2, 0x0, 0x1)
bind$can_raw(r0, 0x0, 0x0)

09:25:01 executing program 3:
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)

[  961.443934][ T9687] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  961.454016][ T9687] ath9k_htc: Failed to initialize the device
[  961.478755][ T1893] usb 2-1: ath9k_htc: USB layer deinitialized
09:25:01 executing program 1:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:25:01 executing program 3:
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)

09:25:01 executing program 0:
r0 = socket(0x2, 0x0, 0x1)
bind$can_raw(r0, 0x0, 0x0)

09:25:01 executing program 4:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

[  961.933792][  T388] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  961.943943][  T388] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  961.952238][  T388] usb 6-1: Product: syz
[  961.959245][  T388] usb 6-1: Manufacturer: syz
[  961.992177][  T388] usb 6-1: SerialNumber: syz
[  962.034603][  T388] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  962.643564][  T388] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  962.862905][ T9687] usb 6-1: USB disconnect, device number 10
09:25:03 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

09:25:03 executing program 2:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:25:03 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)

09:25:03 executing program 0:
r0 = socket(0x2, 0x3, 0x0)
bind$can_raw(r0, 0x0, 0x0)

09:25:03 executing program 1:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:25:03 executing program 4:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:25:03 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)

09:25:03 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)

09:25:03 executing program 0:
r0 = socket(0x2, 0x3, 0x0)
bind$can_raw(r0, 0x0, 0x0)

09:25:03 executing program 3:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)

09:25:03 executing program 3:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)

[  963.683520][  T388] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  963.690543][  T388] ath9k_htc: Failed to initialize the device
[  963.720372][ T9687] usb 6-1: ath9k_htc: USB layer deinitialized
09:25:03 executing program 0:
r0 = socket(0x2, 0x3, 0x0)
bind$can_raw(r0, 0x0, 0x0)

[  964.153303][ T9687] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  964.713448][ T9687] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  964.722576][ T9687] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  964.735607][ T9687] usb 6-1: Product: syz
[  964.739757][ T9687] usb 6-1: Manufacturer: syz
[  964.747032][ T9687] usb 6-1: SerialNumber: syz
[  964.794076][ T9687] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  965.363786][ T9687] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  965.582098][    T8] usb 6-1: USB disconnect, device number 11
09:25:05 executing program 5:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

09:25:05 executing program 3:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)

09:25:05 executing program 0:
socket(0x2, 0x3, 0x1)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)

09:25:05 executing program 4:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:25:05 executing program 2:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

09:25:05 executing program 1:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:25:05 executing program 3:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

09:25:05 executing program 0:
socket(0x2, 0x3, 0x1)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)

09:25:06 executing program 0:
socket(0x2, 0x3, 0x1)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)

09:25:06 executing program 0:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

[  966.403572][ T9687] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  966.413358][ T9687] ath9k_htc: Failed to initialize the device
[  966.436116][    T8] usb 6-1: ath9k_htc: USB layer deinitialized
[  966.463149][  T388] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  966.474304][ T3789] usb 4-1: new high-speed USB device number 9 using dummy_hcd
09:25:06 executing program 1:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:25:06 executing program 4:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

[  966.711559][ T4626] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  966.833809][    T8] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  966.983355][  T388] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  966.992946][  T388] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  967.001294][  T388] usb 3-1: Product: syz
[  967.006228][ T3789] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  967.015517][  T388] usb 3-1: Manufacturer: syz
[  967.020294][ T3789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  967.028845][  T388] usb 3-1: SerialNumber: syz
[  967.039972][ T3789] usb 4-1: Product: syz
[  967.045321][ T3789] usb 4-1: Manufacturer: syz
[  967.049931][ T3789] usb 4-1: SerialNumber: syz
[  967.074185][  T388] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  967.104612][ T3789] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  967.293549][ T4626] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  967.302628][ T4626] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  967.312368][ T4626] usb 1-1: Product: syz
[  967.317870][ T4626] usb 1-1: Manufacturer: syz
[  967.322499][ T4626] usb 1-1: SerialNumber: syz
[  967.364357][    T8] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  967.386920][ T4626] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  967.387015][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  967.416513][    T8] usb 6-1: Product: syz
[  967.420879][    T8] usb 6-1: Manufacturer: syz
[  967.437385][    T8] usb 6-1: SerialNumber: syz
[  967.485163][    T8] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  967.663527][  T388] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  967.686156][ T3789] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  967.879503][ T4609] usb 3-1: USB disconnect, device number 6
[  967.921428][ T1893] usb 4-1: USB disconnect, device number 9
[  968.043217][ T4626] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  968.056145][    T8] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  968.282145][    T5] usb 1-1: USB disconnect, device number 2
[  968.298767][T29862] usb 6-1: USB disconnect, device number 12
[  968.723137][ T3789] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  968.730185][ T3789] ath9k_htc: Failed to initialize the device
[  968.736360][  T388] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  968.743486][  T388] ath9k_htc: Failed to initialize the device
[  968.749745][ T4609] usb 3-1: ath9k_htc: USB layer deinitialized
[  968.750176][ T1893] usb 4-1: ath9k_htc: USB layer deinitialized
09:25:08 executing program 5:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:25:08 executing program 1:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:25:08 executing program 4:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0)
syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0xd7cab7f56d7c791c)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
setsockopt$inet6_dccp_int(r1, 0x21, 0xb, &(0x7f0000001580), 0x4)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x109480, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x401, &(0x7f0000000100)=0x4)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x6200, 0x0)

09:25:08 executing program 2:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

09:25:08 executing program 3:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

09:25:08 executing program 0:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

09:25:08 executing program 4:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0)
syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0xd7cab7f56d7c791c)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
setsockopt$inet6_dccp_int(r1, 0x21, 0xb, &(0x7f0000001580), 0x4)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x109480, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x401, &(0x7f0000000100)=0x4)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x6200, 0x0)

09:25:08 executing program 4:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0)
syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0xd7cab7f56d7c791c)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
setsockopt$inet6_dccp_int(r1, 0x21, 0xb, &(0x7f0000001580), 0x4)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x109480, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x401, &(0x7f0000000100)=0x4)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4)
ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000001540))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x6200, 0x0)

[  969.123143][ T4626] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  969.123255][    T8] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  969.130801][ T4626] ath9k_htc: Failed to initialize the device
[  969.144117][    T8] ath9k_htc: Failed to initialize the device
[  969.147630][T29862] usb 6-1: ath9k_htc: USB layer deinitialized
09:25:08 executing program 4:
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000040)=0x18)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
r1 = socket(0x2, 0x3, 0x1)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001940)={0x0, @can={0x1d, <r2=>0x0}, @generic={0x2, "d05437335a3ac31b4912f8ac086a"}, @tipc=@name={0x1e, 0x2, 0x2, {{0x2, 0x1}, 0x5}}, 0x1, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001900)='ip6gretap0\x00', 0x8000, 0x2, 0x1ff})
bind$can_raw(r1, &(0x7f00000019c0)={0x1d, r2}, 0x10)

[  969.170922][    T5] usb 1-1: ath9k_htc: USB layer deinitialized
09:25:09 executing program 4:
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000040)=0x18)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
r1 = socket(0x2, 0x3, 0x1)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001940)={0x0, @can={0x1d, <r2=>0x0}, @generic={0x2, "d05437335a3ac31b4912f8ac086a"}, @tipc=@name={0x1e, 0x2, 0x2, {{0x2, 0x1}, 0x5}}, 0x1, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001900)='ip6gretap0\x00', 0x8000, 0x2, 0x1ff})
bind$can_raw(r1, &(0x7f00000019c0)={0x1d, r2}, 0x10)

09:25:09 executing program 4:
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000040)=0x18)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
r1 = socket(0x2, 0x3, 0x1)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001940)={0x0, @can={0x1d, <r2=>0x0}, @generic={0x2, "d05437335a3ac31b4912f8ac086a"}, @tipc=@name={0x1e, 0x2, 0x2, {{0x2, 0x1}, 0x5}}, 0x1, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001900)='ip6gretap0\x00', 0x8000, 0x2, 0x1ff})
bind$can_raw(r1, &(0x7f00000019c0)={0x1d, r2}, 0x10)

[  969.283076][ T1893] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  969.303193][ T4609] usb 3-1: new high-speed USB device number 7 using dummy_hcd
09:25:09 executing program 4:
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000040)=0x18)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
socket(0x2, 0x3, 0x1)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001940)={0x0, @can, @generic={0x2, "d05437335a3ac31b4912f8ac086a"}, @tipc=@name={0x1e, 0x2, 0x2, {{0x2, 0x1}, 0x5}}, 0x1, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001900)='ip6gretap0\x00', 0x8000, 0x2, 0x1ff})

09:25:09 executing program 5:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:25:09 executing program 1:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:25:09 executing program 4:
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000040)=0x18)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
socket(0x2, 0x3, 0x1)

[  969.543556][    T5] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  969.803154][ T1893] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  969.812642][ T1893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  969.822582][ T1893] usb 4-1: Product: syz
[  969.827573][ T1893] usb 4-1: Manufacturer: syz
[  969.832278][ T1893] usb 4-1: SerialNumber: syz
[  969.874108][ T1893] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  969.903220][ T4609] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  969.903261][ T4609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  969.903280][ T4609] usb 3-1: Product: syz
[  969.903292][ T4609] usb 3-1: Manufacturer: syz
[  969.903305][ T4609] usb 3-1: SerialNumber: syz
[  969.954274][ T4609] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  970.073432][    T5] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  970.082505][    T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  970.103037][    T5] usb 1-1: Product: syz
[  970.108039][    T5] usb 1-1: Manufacturer: syz
[  970.112639][    T5] usb 1-1: SerialNumber: syz
[  970.174011][    T5] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  970.453082][ T1893] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  970.653429][ T4609] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  970.689872][ T4626] usb 4-1: USB disconnect, device number 10
[  970.743128][    T5] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  970.869920][  T388] usb 3-1: USB disconnect, device number 7
[  970.964288][   T20] usb 1-1: USB disconnect, device number 3
09:25:11 executing program 2:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

09:25:11 executing program 4:
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000040)=0x18)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
socket(0x2, 0x3, 0x1)

09:25:11 executing program 0:
userfaultfd(0x80000)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x682, 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=0x30)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000100)=0x200, &(0x7f0000000140)=0x4)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x3}, {0x1, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x38)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000200)={0x5, 0x21f3, 0x2, 0x81, 0x6, 0x9, 0x7}, 0xc)
r3 = syz_open_dev$binderN(&(0x7f0000000240), 0x0, 0x802)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@flat=@handle={0x73682a85, 0x110b, 0x1}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/177, 0xb1, 0x1, 0x26}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}}], 0x55, 0x0, &(0x7f00000004c0)="7b5438a4b0dd9464c284fb980d9c73a209db69dbb4c39558d665283a1214fa7bb7368f90eada4618c934a62fb1e2e478cb3c7a59b01dff786a58c0e9b0d3127000a23af060bcda892ab22f6c37bb72ca16b15ca824"})
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000580)={0xaa, 0x50})
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000005c0)=0x10, 0x4)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000600)=[{{0x1, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4}}], 0x20)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000640)=0x7, 0x4)
ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000680))

09:25:11 executing program 5:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:25:11 executing program 1:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:25:11 executing program 3:
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

09:25:11 executing program 4:
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000040)=0x18)
socket(0x2, 0x3, 0x1)

[  971.523007][ T1893] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  971.536363][ T1893] ath9k_htc: Failed to initialize the device
[  971.568194][ T4626] usb 4-1: ath9k_htc: USB layer deinitialized
09:25:11 executing program 4:
socket(0x2, 0x3, 0x1)

09:25:11 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r7 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
epoll_create1(0x80000)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)

[  971.693127][ T4609] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  971.700497][ T4609] ath9k_htc: Failed to initialize the device
09:25:11 executing program 4:
socket(0x0, 0x3, 0x1)

[  971.739241][  T388] usb 3-1: ath9k_htc: USB layer deinitialized
[  971.763040][    T5] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  971.776483][    T5] ath9k_htc: Failed to initialize the device
[  971.776635][ T5422] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  971.800058][   T20] usb 1-1: ath9k_htc: USB layer deinitialized
09:25:11 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r7 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
epoll_create1(0x80000)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)

09:25:11 executing program 4:
socket(0x0, 0x3, 0x1)

[  971.961894][ T5440] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  972.042987][ T4626] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  972.133073][  T388] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  972.593162][ T4626] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  972.602359][ T4626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  972.615568][ T4626] usb 4-1: Product: syz
[  972.619721][ T4626] usb 4-1: Manufacturer: syz
[  972.626787][ T4626] usb 4-1: SerialNumber: syz
[  972.663198][  T388] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  972.673106][  T388] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  972.673792][ T4626] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  972.681200][  T388] usb 3-1: Product: syz
[  972.693981][  T388] usb 3-1: Manufacturer: syz
[  972.703670][  T388] usb 3-1: SerialNumber: syz
[  972.763577][  T388] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  973.352954][  T388] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  973.412920][ T4626] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  973.573338][    T5] usb 3-1: USB disconnect, device number 8
[  973.635273][ T4158] usb 4-1: USB disconnect, device number 11
09:25:13 executing program 2:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:25:13 executing program 4:
socket(0x0, 0x3, 0x1)

09:25:13 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r7 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
epoll_create1(0x80000)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)

09:25:13 executing program 1:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:25:13 executing program 5:
socket(0x0, 0x3, 0x1)

[  974.150557][ T5474] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:13 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r7 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
epoll_create1(0x80000)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)

09:25:13 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r7 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
epoll_create1(0x80000)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)

09:25:13 executing program 4:
socket(0x2, 0x0, 0x1)

09:25:14 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r7 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
epoll_create1(0x80000)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

[  974.310361][ T5488] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  974.327056][ T5487] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  974.343694][ T5489] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:14 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r7 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
epoll_create1(0x80000)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)

09:25:14 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r7 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

[  974.403179][  T388] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  974.410182][  T388] ath9k_htc: Failed to initialize the device
09:25:14 executing program 4:
socket(0x2, 0x0, 0x1)

[  974.456533][    T5] usb 3-1: ath9k_htc: USB layer deinitialized
[  974.492811][ T4626] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  974.500107][ T4626] ath9k_htc: Failed to initialize the device
[  974.518816][ T5500] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  974.534564][ T4158] usb 4-1: ath9k_htc: USB layer deinitialized
[  974.548713][ T5502] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:14 executing program 2:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:25:14 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r7 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
epoll_create1(0x80000)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)

09:25:14 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r6 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:14 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r7 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
epoll_create1(0x80000)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)

09:25:14 executing program 4:
socket(0x2, 0x0, 0x1)

09:25:14 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r7 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

[  974.827718][ T5523] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  974.831458][ T5525] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:14 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r7 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
epoll_create1(0x80000)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)

09:25:14 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r7 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
epoll_create1(0x80000)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:14 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r6 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:14 executing program 4:
socket(0x2, 0x3, 0x0)

09:25:14 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r7 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:14 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r7 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
epoll_create1(0x80000)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:15 executing program 2:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:25:15 executing program 4:
socket(0x2, 0x3, 0x0)

09:25:15 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r6 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
epoll_create1(0x80000)

09:25:15 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r6 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:15 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r7 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:15 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r6 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
epoll_create1(0x80000)

09:25:15 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r5 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
epoll_create1(0x80000)

09:25:15 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r6 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:15 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r6 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:15 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
socket$inet(0x2, 0x3, 0x6)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:15 executing program 4:
socket(0x2, 0x3, 0x0)

09:25:15 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
socket$inet(0x2, 0x3, 0x6)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:15 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:15 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
socket$inet(0x2, 0x3, 0x6)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:15 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
socket$inet(0x2, 0x3, 0x6)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:15 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
socket$inet(0x2, 0x3, 0x6)
epoll_create1(0x80000)

09:25:15 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r6 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:15 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
socket$inet(0x2, 0x3, 0x6)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:15 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:15 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
epoll_create1(0x80000)

09:25:15 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
socket$inet(0x2, 0x3, 0x6)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:16 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
socket$inet(0x2, 0x3, 0x6)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:16 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
socket$inet(0x2, 0x3, 0x6)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:16 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:16 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:16 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
epoll_create1(0x80000)

09:25:16 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:16 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
socket$inet(0x2, 0x3, 0x6)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:16 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:16 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
socket$inet(0x2, 0x3, 0x6)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:16 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:16 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
epoll_create1(0x80000)

09:25:16 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:16 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
socket$inet(0x2, 0x3, 0x6)

09:25:16 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:16 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
socket$inet(0x2, 0x3, 0x6)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:16 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
epoll_create1(0x80000)

09:25:16 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:16 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
socket$inet(0x2, 0x3, 0x6)

[  976.837192][ T5639] rds_bind: 20 callbacks suppressed
[  976.837208][ T5639] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  976.860269][ T5640] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:16 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

[  976.941051][ T5643] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:16 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:16 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:16 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
epoll_create1(0x80000)

09:25:16 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
socket$inet(0x2, 0x3, 0x6)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:16 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
socket$inet(0x2, 0x3, 0x6)

[  977.146784][ T5655] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  977.151239][ T5653] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:16 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:17 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:17 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
epoll_create1(0x80000)

[  977.270114][ T5661] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:17 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:17 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
socket$inet(0x2, 0x3, 0x6)

09:25:17 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:17 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
socket$inet(0x2, 0x3, 0x6)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

[  977.406236][ T5668] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  977.429246][ T5671] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:17 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
epoll_create1(0x80000)

09:25:17 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:17 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
socket$inet(0x2, 0x3, 0x6)

09:25:17 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:17 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

[  977.556972][ T5678] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:17 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x80000)

09:25:17 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

[  977.677672][ T5686] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:17 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
socket$inet(0x2, 0x3, 0x6)

09:25:17 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:17 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:17 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:17 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
epoll_create1(0x80000)

09:25:17 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:17 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:17 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet(0x2, 0x3, 0x6)

09:25:17 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:17 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:17 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
epoll_create1(0x80000)

09:25:17 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:17 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:17 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x3, 0x6)

09:25:18 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:18 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:18 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
epoll_create1(0x80000)

09:25:18 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet(0x2, 0x3, 0x6)

09:25:18 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:18 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:18 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:18 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:18 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
epoll_create1(0x80000)

09:25:18 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
socket$inet(0x2, 0x3, 0x6)

09:25:18 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:18 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:18 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:18 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:18 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
epoll_create1(0x80000)

09:25:18 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:18 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
socket$inet(0x2, 0x3, 0x6)

09:25:18 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:18 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:18 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
epoll_create1(0x80000)

09:25:18 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:18 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:18 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$inet(0x2, 0x3, 0x6)

09:25:18 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:18 executing program 5:
epoll_create1(0x80000)

09:25:18 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:18 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:18 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
socket$inet(0x2, 0x3, 0x6)

09:25:18 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:18 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:18 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:19 executing program 5:
epoll_create1(0x0)

09:25:19 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
socket$inet(0x2, 0x3, 0x6)

09:25:19 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:19 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:19 executing program 5:
epoll_create1(0x80000)

09:25:19 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:19 executing program 2:
socket$inet(0x2, 0x3, 0x6)

09:25:19 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:19 executing program 3:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:19 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:19 executing program 5:
epoll_create1(0x80000)

09:25:19 executing program 2:
socket$inet(0x2, 0x0, 0x6)

09:25:19 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:19 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:19 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:19 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:19 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:19 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:19 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:19 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:19 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:19 executing program 2:
socket$inet(0x2, 0x0, 0x6)

09:25:19 executing program 1:
socket$rds(0x15, 0x5, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:19 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:19 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:19 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:19 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:19 executing program 1:
socket$rds(0x15, 0x5, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:19 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:20 executing program 3:
syz_io_uring_setup(0x733d, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:20 executing program 2:
socket$inet(0x2, 0x0, 0x6)

09:25:20 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:20 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:20 executing program 1:
socket$rds(0x15, 0x5, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:20 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:20 executing program 3:
syz_io_uring_setup(0x733d, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:20 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:20 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:20 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, 0x0, 0x0)

09:25:20 executing program 2:
socket$inet(0x2, 0x3, 0x0)

09:25:20 executing program 3:
syz_io_uring_setup(0x733d, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:20 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:20 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:20 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, 0x0, 0x0)

09:25:20 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:20 executing program 3:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:20 executing program 2:
socket$inet(0x2, 0x3, 0x0)

09:25:20 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:20 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:20 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, 0x0, 0x0)

09:25:20 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:20 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:20 executing program 3:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:20 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x0, @rand_addr=0x64010101}, 0x10)

09:25:20 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:20 executing program 2:
socket$inet(0x2, 0x3, 0x0)

09:25:20 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:20 executing program 4:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:20 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000200), 0x10)

09:25:20 executing program 3:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:20 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:21 executing program 4:
socket$rds(0x15, 0x5, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:21 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:21 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:21 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000200), 0x10)

09:25:21 executing program 2:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000200), 0x10)

09:25:21 executing program 3:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x0, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:21 executing program 4:
socket$rds(0x15, 0x5, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:21 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:21 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000200), 0x10)

09:25:21 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:21 executing program 2:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000200), 0x10)

09:25:21 executing program 3:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x0, 0x0, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:21 executing program 4:
socket$rds(0x15, 0x5, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:21 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:21 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:21 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:21 executing program 2:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000200), 0x10)

09:25:21 executing program 3:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:21 executing program 4:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, 0x0, 0x0)

[  981.871422][ T5975] rds_bind: 54 callbacks suppressed
[  981.871436][ T5975] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  981.921164][ T5979] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  981.933723][ T5977] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:21 executing program 2:
bind$rds(0xffffffffffffffff, &(0x7f0000000200), 0x10)

09:25:21 executing program 3:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:21 executing program 4:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, 0x0, 0x0)

09:25:21 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:21 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:21 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:21 executing program 3:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

[  982.141429][ T5993] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  982.166268][ T5996] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:21 executing program 2:
bind$rds(0xffffffffffffffff, &(0x7f0000000200), 0x10)

09:25:21 executing program 4:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, 0x0, 0x0)

[  982.187541][ T5997] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:22 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:22 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:22 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:22 executing program 4:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x0, @rand_addr=0x64010101}, 0x10)

09:25:22 executing program 2:
bind$rds(0xffffffffffffffff, &(0x7f0000000200), 0x10)

09:25:22 executing program 3:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

[  982.391822][ T6008] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:22 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

[  982.455578][ T6010] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:22 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

[  982.511451][ T6016] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:22 executing program 2:
socket$rds(0x15, 0x5, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000200), 0x10)

09:25:22 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:22 executing program 3:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

[  982.573043][ T6019] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:22 executing program 4:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000200), 0x10)

09:25:22 executing program 1:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x0, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:22 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:22 executing program 2:
socket$rds(0x15, 0x5, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000200), 0x10)

09:25:22 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:22 executing program 3:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:22 executing program 4:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000200), 0x10)

09:25:22 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:22 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:22 executing program 2:
socket$rds(0x15, 0x5, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000200), 0x10)

09:25:22 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:22 executing program 4:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000200), 0x10)

09:25:22 executing program 3:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:22 executing program 2:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, 0x0, 0x0)

09:25:22 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:22 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:22 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:22 executing program 3:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:22 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:23 executing program 2:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, 0x0, 0x0)

09:25:23 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:23 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:23 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:23 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:23 executing program 3:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:23 executing program 2:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, 0x0, 0x0)

09:25:23 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:23 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:23 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:23 executing program 2:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:23 executing program 3:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:23 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:23 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
r0 = socket$rds(0x15, 0x5, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:23 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:23 executing program 2:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:23 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:23 executing program 3:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:23 executing program 4:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, 0x0, 0x0)

09:25:23 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$rds(0x15, 0x5, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:23 executing program 2:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:23 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:23 executing program 3:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, 0x0, 0xffffffff)

09:25:23 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
r0 = socket$rds(0x15, 0x5, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:23 executing program 4:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, 0x0, 0x0)

09:25:23 executing program 5:
r0 = socket$rds(0x15, 0x5, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:23 executing program 2:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)

09:25:23 executing program 0:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:23 executing program 4:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, 0x0, 0x0)

09:25:23 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:23 executing program 3:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, 0x0, 0xffffffff)

09:25:24 executing program 5:
r0 = socket$rds(0x15, 0x5, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:24 executing program 2:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

09:25:24 executing program 4:
bind$rds(0xffffffffffffffff, 0x0, 0x0)

09:25:24 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:24 executing program 5:
socket$rds(0x15, 0x5, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:24 executing program 3:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, 0x0, 0xffffffff)

09:25:24 executing program 0:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:24 executing program 2:
syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

09:25:24 executing program 4:
bind$rds(0xffffffffffffffff, 0x0, 0x0)

09:25:24 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:24 executing program 2:
syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

09:25:24 executing program 5:
socket$rds(0x15, 0x5, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:24 executing program 0:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:24 executing program 3:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:24 executing program 4:
bind$rds(0xffffffffffffffff, 0x0, 0x0)

09:25:24 executing program 5:
socket$rds(0x15, 0x5, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:24 executing program 2:
syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

09:25:24 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:24 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:24 executing program 4:
socket$rds(0x15, 0x5, 0x0)
bind$rds(0xffffffffffffffff, 0x0, 0x0)

09:25:24 executing program 3:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:24 executing program 5:
r0 = socket$rds(0x15, 0x5, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$rds(r0, 0x0, 0x0)

09:25:24 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:24 executing program 2:
syz_io_uring_setup(0x733d, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

09:25:24 executing program 4:
socket$rds(0x15, 0x5, 0x0)
bind$rds(0xffffffffffffffff, 0x0, 0x0)

09:25:24 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:24 executing program 3:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x200, 0x400, 0x1}, 0xffffffff)

09:25:24 executing program 5:
r0 = socket$rds(0x15, 0x5, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$rds(r0, 0x0, 0x0)

09:25:24 executing program 4:
socket$rds(0x15, 0x5, 0x0)
bind$rds(0xffffffffffffffff, 0x0, 0x0)

09:25:24 executing program 2:
syz_io_uring_setup(0x733d, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

09:25:24 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:24 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:25 executing program 3:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400, 0x1}, 0xffffffff)

09:25:25 executing program 5:
r0 = socket$rds(0x15, 0x5, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$rds(r0, 0x0, 0x0)

09:25:25 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:25 executing program 2:
syz_io_uring_setup(0x733d, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

09:25:25 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:25 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:25 executing program 3:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffff)

09:25:25 executing program 5:
r0 = socket$rds(0x15, 0x5, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x0, @rand_addr=0x64010101}, 0x10)

09:25:25 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:25 executing program 2:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

09:25:25 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:25 executing program 5:
r0 = socket$rds(0x15, 0x5, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$rds(r0, &(0x7f0000000200), 0x10)

09:25:25 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:25 executing program 3:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0xffffffff)

09:25:25 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:25 executing program 2:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

09:25:25 executing program 5:
r0 = socket$rds(0x15, 0x5, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$rds(r0, &(0x7f0000000200), 0x10)

09:25:25 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:25 executing program 3:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)

09:25:25 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:25 executing program 2:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

09:25:25 executing program 5:
r0 = socket$rds(0x15, 0x5, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$rds(r0, &(0x7f0000000200), 0x10)

09:25:25 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x80000)

09:25:25 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:25 executing program 3:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)

09:25:25 executing program 2:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

09:25:25 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:25 executing program 5:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)

09:25:26 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:26 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:26 executing program 3:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)

09:25:26 executing program 2:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x0, 0x8}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

09:25:26 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:26 executing program 5:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)

09:25:26 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:26 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:26 executing program 2:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x0, 0x8}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000100))

09:25:26 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
socket$inet(0x2, 0x3, 0x6)

09:25:26 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:26 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:26 executing program 2:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x0, 0x8}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000100))

09:25:26 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:26 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:26 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:26 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
epoll_create1(0x80000)

09:25:26 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:26 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:26 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:26 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
socket$inet(0x2, 0x3, 0x6)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:26 executing program 2:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x0, 0x8}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000100))

09:25:26 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
socket$inet(0x2, 0x3, 0x6)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:26 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

[  987.005507][ T6315] rds_bind: 50 callbacks suppressed
[  987.005524][ T6315] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  987.042391][ T6316] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:26 executing program 2:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x0, 0x8}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), 0x0)

[  987.044470][ T6317] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:26 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
socket$inet(0x2, 0x3, 0x6)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

09:25:26 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r6 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:27 executing program 2:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x0, 0x8}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), 0x0)

[  987.180144][ T6323] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:27 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:27 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r7 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
epoll_create1(0x80000)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:27 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r6 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:27 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
socket$inet(0x2, 0x3, 0x6)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)

[  987.337763][ T6333] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  987.357870][ T6336] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:27 executing program 2:
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x0, 0x8}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), 0x0)

[  987.398946][ T6338] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:27 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:27 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee00)
sendmsg$rds(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r6 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:27 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r7 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
epoll_create1(0x80000)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

[  987.504063][ T6342] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:27 executing program 2:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:25:27 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r7 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
epoll_create1(0x80000)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:27 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r7 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
epoll_create1(0x80000)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

[  987.599665][ T6348] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  987.615648][ T6349] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:27 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r7 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
epoll_create1(0x80000)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:27 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:27 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r7 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
epoll_create1(0x80000)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)

09:25:27 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r7 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
epoll_create1(0x80000)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)

09:25:27 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_setup(0x733d, &(0x7f0000000040)={0x0, 0x6911, 0x8, 0x1, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
r7 = socket$inet(0x2, 0x3, 0x6)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
epoll_create1(0x80000)
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:27 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
accept(r0, 0x0, &(0x7f0000000000))
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:25:27 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
r6 = syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r5, r7, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r8, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000002, 0x20010, r6, 0x8000000)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x2, 0x8000, 0x0, 0x1ff}, 0x8001)

09:25:27 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:27 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
r2 = getegid()
ioctl$TUNSETGROUP(r1, 0x400454ce, r2)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)

09:25:27 executing program 2:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:25:27 executing program 1:
userfaultfd(0x80000)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x682, 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=0x30)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000100)=0x200, &(0x7f0000000140)=0x4)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x3}, {0x1, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x38)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000200)={0x5, 0x21f3, 0x2, 0x81, 0x6, 0x9, 0x7}, 0xc)
r3 = syz_open_dev$binderN(&(0x7f0000000240), 0x0, 0x802)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@flat=@handle={0x73682a85, 0x110b, 0x1}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/177, 0xb1, 0x1, 0x26}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}}], 0x55, 0x0, &(0x7f00000004c0)="7b5438a4b0dd9464c284fb980d9c73a209db69dbb4c39558d665283a1214fa7bb7368f90eada4618c934a62fb1e2e478cb3c7a59b01dff786a58c0e9b0d3127000a23af060bcda892ab22f6c37bb72ca16b15ca824"})
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000580)={0xaa, 0x50})
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000005c0)=0x10, 0x4)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000600)=[{{0x1, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4}}], 0x20)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000640)=0x7, 0x4)
ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000680))

09:25:27 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
accept(r0, 0x0, &(0x7f0000000000))
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:25:27 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
r6 = syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r5, r7, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r8, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000002, 0x20010, r6, 0x8000000)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x2, 0x8000, 0x0, 0x1ff}, 0x8001)

09:25:27 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
r2 = getegid()
ioctl$TUNSETGROUP(r1, 0x400454ce, r2)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)

09:25:27 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:28 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
accept(r0, 0x0, &(0x7f0000000000))
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:25:28 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
r2 = getegid()
ioctl$TUNSETGROUP(r1, 0x400454ce, r2)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)

09:25:28 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:28 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:28 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
r6 = syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r5, r7, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r8, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000002, 0x20010, r6, 0x8000000)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x2, 0x8000, 0x0, 0x1ff}, 0x8001)

09:25:28 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:28 executing program 2:
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)

09:25:28 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
accept(r0, 0x0, &(0x7f0000000000))

09:25:28 executing program 3:
openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
r1 = getegid()
ioctl$TUNSETGROUP(r0, 0x400454ce, r1)

09:25:28 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:28 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
r6 = syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r5, r7, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r8, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000002, 0x20010, r6, 0x8000000)

09:25:28 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:28 executing program 3:
openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
getegid()

09:25:28 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r7, 0x0, 0x0)

09:25:28 executing program 1:
userfaultfd(0x80000)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x682, 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=0x30)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000100)=0x200, &(0x7f0000000140)=0x4)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x3}, {0x1, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x38)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000200)={0x5, 0x21f3, 0x2, 0x81, 0x6, 0x9, 0x7}, 0xc)
r3 = syz_open_dev$binderN(&(0x7f0000000240), 0x0, 0x802)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@flat=@handle={0x73682a85, 0x110b, 0x1}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/177, 0xb1, 0x1, 0x26}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}}], 0x55, 0x0, &(0x7f00000004c0)="7b5438a4b0dd9464c284fb980d9c73a209db69dbb4c39558d665283a1214fa7bb7368f90eada4618c934a62fb1e2e478cb3c7a59b01dff786a58c0e9b0d3127000a23af060bcda892ab22f6c37bb72ca16b15ca824"})
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000580)={0xaa, 0x50})
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000005c0)=0x10, 0x4)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000600)=[{{0x1, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4}}], 0x18)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000640)=0x7, 0x4)
ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000680))

09:25:28 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:28 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
accept(r0, 0x0, &(0x7f0000000000))

09:25:28 executing program 3:
openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getegid()

09:25:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
accept(r0, 0x0, &(0x7f0000000000))

09:25:29 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)

09:25:29 executing program 1:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r7, 0x0, 0x0)

09:25:29 executing program 5:
accept(0xffffffffffffffff, 0x0, &(0x7f0000000000))

09:25:29 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:29 executing program 3:
openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
getegid()

09:25:29 executing program 5:
accept(0xffffffffffffffff, 0x0, &(0x7f0000000000))

09:25:29 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:29 executing program 3:
getegid()

09:25:29 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)

09:25:29 executing program 2:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r7, 0x0, 0x0)

09:25:29 executing program 1:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r7, 0x0, 0x0)

09:25:29 executing program 5:
accept(0xffffffffffffffff, 0x0, &(0x7f0000000000))

09:25:29 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:29 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:29 executing program 2:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, &(0x7f0000000500)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/105, 0x69}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000140)}, {&(0x7f0000000180)=""/11, 0xb}, {&(0x7f00000001c0)=""/140, 0x8c}, {&(0x7f0000000280)=""/3, 0x3}, {&(0x7f00000002c0)=""/89, 0x59}, {&(0x7f0000000340)=""/58, 0x3a}, {&(0x7f0000000380)=""/4, 0x4}], 0x9, &(0x7f0000000480)=""/119, 0x77}, 0x2)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000580)={0x0, @isdn={0x22, 0x4, 0x8, 0x92, 0x2}, @nl=@unspec, @nl=@kern={0x10, 0x0, 0x0, 0x22840000}, 0x8, 0x0, 0x0, 0x0, 0x100, &(0x7f0000000540)='batadv_slave_0\x00', 0x0, 0x101, 0x8})
r2 = fork()
r3 = getpgrp(r2)
bind$can_raw(r0, &(0x7f0000000600), 0x10)
getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000640), &(0x7f0000000680)=0x4)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000006c0)={0xffff8001}, 0x4)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000700), 0x400900, 0x0)
accept(r0, &(0x7f0000000740)=@un=@abs, &(0x7f00000007c0)=0x80)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000800)={0x1})
r5 = accept(r1, &(0x7f0000000840)=@sco, &(0x7f00000008c0)=0x80)
ioctl$sock_bt_hci(r5, 0x400448e2, &(0x7f0000000900)="5a99bc8ed88e3b46c123")
migrate_pages(r3, 0x4, &(0x7f0000000940)=0x6a, &(0x7f0000000980)=0x7f)
capset(&(0x7f00000009c0)={0xf1504, r2}, &(0x7f0000000a00)={0x7fff, 0x8, 0xe00, 0x40, 0x800, 0x1})
r6 = syz_io_uring_complete(0x0)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r5)
sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, r7, 0x211, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000)

09:25:29 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000000))

09:25:29 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)

09:25:29 executing program 1:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r7, 0x0, 0x0)

09:25:29 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, 0x0, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:29 executing program 3:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)

09:25:29 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000000))

09:25:29 executing program 1:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)

09:25:29 executing program 4:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
r3 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r4=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r3}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r6, 0x0, 0x0)

09:25:29 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, 0x0, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:30 executing program 3:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)

09:25:30 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000000))

09:25:30 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
r3 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r4=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r3}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r6, 0x0, 0x0)

09:25:30 executing program 1:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
r3 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r4=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r3}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
socket$can_raw(0x1d, 0x3, 0x1)

09:25:30 executing program 4:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
r3 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r4=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r3}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r6, 0x0, 0x0)

09:25:30 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, 0x0, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:30 executing program 3:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)

09:25:30 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
accept(r0, 0x0, 0x0)

09:25:30 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:30 executing program 4:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
r3 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r4=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r3}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r6, 0x0, 0x0)

09:25:30 executing program 5:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
r3 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r4=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r3}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r6, 0x0, 0x0)

09:25:30 executing program 3:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
r3 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r4=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r3}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
socket$can_raw(0x1d, 0x3, 0x1)

09:25:30 executing program 1:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
r3 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r4=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r3}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)

09:25:30 executing program 2:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)

09:25:30 executing program 3:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
r3 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r4=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r3}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)

09:25:30 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:31 executing program 5:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
r3 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r4=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r3}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
socket$can_raw(0x1d, 0x3, 0x1)

09:25:31 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)

09:25:31 executing program 1:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
r3 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r4=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r3}, 0x93)

09:25:31 executing program 2:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)

09:25:31 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:31 executing program 3:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
r3 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r4=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r3}, 0x93)

09:25:31 executing program 5:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
r3 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r4=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r3}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r6, 0x0, 0x0)

09:25:31 executing program 1:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
r3 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))

09:25:31 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)

09:25:31 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:31 executing program 2:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)

09:25:31 executing program 1:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
r3 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0x10000000)

09:25:31 executing program 3:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
r3 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))

09:25:31 executing program 5:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
r3 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))

09:25:31 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)

09:25:31 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
r3 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r4=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r3}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
socket$can_raw(0x1d, 0x3, 0x1)

09:25:31 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:31 executing program 1:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:31 executing program 3:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
r3 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0x10000000)

09:25:31 executing program 5:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
r3 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))

09:25:31 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000740)=""/209, 0xd1}], 0x5, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:31 executing program 1:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:31 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
r3 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r4=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r3}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)

09:25:31 executing program 3:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:31 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r7, 0x0, 0x0)

09:25:31 executing program 5:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)

[  992.170471][ T6693] rds_bind: 28 callbacks suppressed
[  992.170485][ T6693] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:32 executing program 1:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:32 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r7, 0x0, 0x0)

09:25:32 executing program 3:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:32 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:32 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
r3 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r4=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r3}, 0x93)

09:25:32 executing program 1:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:32 executing program 5:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r7, 0x0, 0x0)

09:25:32 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r7, 0x0, 0x0)

09:25:32 executing program 3:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

[  992.496877][ T6723] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:32 executing program 1:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:32 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:32 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
r3 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))

09:25:32 executing program 5:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
r3 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r4=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r3}, 0x93)

[  992.642098][ T3228] ieee802154 phy0 wpan0: encryption failed: -22
[  992.648449][ T3228] ieee802154 phy1 wpan1: encryption failed: -22
09:25:32 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r6, 0x0, 0x0)

09:25:32 executing program 1:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:32 executing program 3:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:32 executing program 5:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r7, 0x0, 0x0)

[  992.833045][ T6751] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:32 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
r3 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0x10000000)

09:25:32 executing program 1:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:32 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r6, 0x0, 0x0)

09:25:32 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:32 executing program 3:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:32 executing program 5:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r6, 0x0, 0x0)

09:25:32 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:32 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

[  993.147532][ T6776] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:33 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r6, 0x0, 0x0)

09:25:33 executing program 5:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r6, 0x0, 0x0)

09:25:33 executing program 3:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:33 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:33 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:33 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:33 executing program 3:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

[  993.427173][ T6799] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:33 executing program 5:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:33 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r6, 0x0, 0x0)

09:25:33 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:33 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:33 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:33 executing program 5:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:33 executing program 3:
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:33 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r6, 0x0, 0x0)

[  993.679036][ T6818] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:33 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:33 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:33 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:33 executing program 5:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r6, 0x0, 0x0)

09:25:33 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:33 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r6, 0x0, 0x0)

[  993.900350][ T6833] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:33 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:33 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:33 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:33 executing program 1:
syz_io_uring_setup(0x1149, 0x0, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:33 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r7, 0x0, 0x0)

09:25:33 executing program 5:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r6, 0x0, 0x0)

[  994.136226][ T6852] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:33 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:34 executing program 1:
syz_io_uring_setup(0x1149, 0x0, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:34 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:34 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:34 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r7, 0x0, 0x0)

09:25:34 executing program 5:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r7, 0x0, 0x0)

09:25:34 executing program 3:
syz_io_uring_setup(0x1149, 0x0, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:34 executing program 1:
syz_io_uring_setup(0x1149, 0x0, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:34 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

[  994.439906][ T6873] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:34 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r2 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r2}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r5, 0x0, 0x0)

09:25:34 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:34 executing program 3:
syz_io_uring_setup(0x1149, 0x0, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:34 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:34 executing program 5:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r7, 0x0, 0x0)

09:25:34 executing program 2:
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

[  994.658777][ T6892] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:34 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
r2 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r2}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r5, 0x0, 0x0)

09:25:34 executing program 3:
syz_io_uring_setup(0x1149, 0x0, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:34 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:34 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:34 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:34 executing program 2:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:34 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
r2 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r2}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r5, 0x0, 0x0)

09:25:34 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:34 executing program 3:
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:34 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:34 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:34 executing program 2:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:34 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:34 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
r2 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r2}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r5, 0x0, 0x0)

09:25:34 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:35 executing program 3:
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:35 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:35 executing program 2:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:35 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:35 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:35 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:35 executing program 5:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
r2 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r2}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r5, 0x0, 0x0)

09:25:35 executing program 3:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:35 executing program 2:
syz_io_uring_setup(0x1149, 0x0, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:35 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:35 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:35 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:35 executing program 2:
syz_io_uring_setup(0x1149, 0x0, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:35 executing program 5:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:35 executing program 3:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:35 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:35 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:35 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:35 executing program 2:
syz_io_uring_setup(0x1149, 0x0, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:35 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:35 executing program 3:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:35 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:35 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:35 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:35 executing program 2:
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:35 executing program 3:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:35 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:35 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:35 executing program 5:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:36 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:36 executing program 2:
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:36 executing program 3:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:36 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:36 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:36 executing program 4:
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r3, 0x0, 0x0)

09:25:36 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:36 executing program 2:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:36 executing program 3:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:36 executing program 5:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:36 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, 0x0, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:36 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:36 executing program 4:
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r3, 0x0, 0x0)

09:25:36 executing program 2:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:36 executing program 3:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:36 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, 0x0, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:36 executing program 2:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:36 executing program 5:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:36 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:36 executing program 4:
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r3, 0x0, 0x0)

09:25:36 executing program 3:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:36 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, 0x0, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:36 executing program 3:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, 0x0, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:36 executing program 2:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:36 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x0, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:36 executing program 5:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:36 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:37 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:37 executing program 3:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, 0x0, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

[  997.290637][ T7090] rds_bind: 16 callbacks suppressed
[  997.290651][ T7090] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:37 executing program 2:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:37 executing program 5:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)

09:25:37 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:37 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:37 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:37 executing program 3:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, 0x0, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:37 executing program 2:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:37 executing program 5:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
socket$can_raw(0x1d, 0x3, 0x1)

09:25:37 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

[  997.600852][ T7113] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:37 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00'}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:37 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:37 executing program 3:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:37 executing program 2:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:37 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, 0x0, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:37 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, &(0x7f00000000c0))

09:25:37 executing program 5:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)

09:25:37 executing program 3:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

[  997.890745][ T7132] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:37 executing program 2:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:37 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00'}, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:37 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, 0x0, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:37 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, &(0x7f00000000c0))

09:25:37 executing program 5:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)

09:25:37 executing program 2:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, 0x0, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:37 executing program 3:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

[  998.131567][ T7152] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:38 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, 0x0, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:38 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
sendmsg$rds(r0, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00'}, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:38 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, &(0x7f00000000c0))

09:25:38 executing program 5:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))

09:25:38 executing program 3:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, &(0x7f00000000c0))

09:25:38 executing program 2:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, 0x0, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:38 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
sendmsg$rds(r0, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00'}, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:38 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:38 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)

09:25:38 executing program 2:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, 0x0, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:38 executing program 3:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, &(0x7f00000000c0))

09:25:38 executing program 5:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:38 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
sendmsg$rds(r0, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00'}, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:38 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)

09:25:38 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:38 executing program 5:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:38 executing program 3:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, &(0x7f00000000c0))

09:25:38 executing program 2:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:38 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:38 executing program 3:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)

09:25:38 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00'}, 0x0)
bind$rds(r0, 0x0, 0x0)

09:25:38 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)

09:25:38 executing program 5:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:38 executing program 2:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:38 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:38 executing program 3:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)

09:25:38 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)

09:25:39 executing program 2:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:39 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00'}, 0x0)
bind$rds(r0, 0x0, 0x0)

09:25:39 executing program 5:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:39 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:39 executing program 3:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)

09:25:39 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)

09:25:39 executing program 2:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, &(0x7f00000000c0))

09:25:39 executing program 5:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:39 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00'}, 0x0)
bind$rds(r0, 0x0, 0x0)

09:25:39 executing program 3:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:39 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, &(0x7f00000000c0))

09:25:39 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:39 executing program 5:
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:39 executing program 2:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, &(0x7f00000000c0))

09:25:39 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00'}, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x0, @rand_addr=0x64010101}, 0x10)

09:25:39 executing program 3:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:39 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:39 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)

09:25:39 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:39 executing program 2:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, &(0x7f00000000c0))

[  999.826753][ T7276] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:39 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:39 executing program 1:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))

09:25:39 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00'}, 0x0)
bind$rds(r0, &(0x7f0000000200), 0x10)

09:25:39 executing program 2:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)

09:25:39 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:39 executing program 3:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:39 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:39 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00'}, 0x0)
bind$rds(r0, &(0x7f0000000200), 0x10)

09:25:39 executing program 1:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, 0x0, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:40 executing program 2:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)

09:25:40 executing program 5:
syz_io_uring_setup(0x1149, 0x0, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:40 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:40 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00'}, 0x0)
bind$rds(r0, &(0x7f0000000200), 0x10)

09:25:40 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00'}, 0x0)
bind$rds(r0, &(0x7f0000000200), 0x10)

09:25:40 executing program 1:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:40 executing program 2:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)

09:25:40 executing program 5:
syz_io_uring_setup(0x1149, 0x0, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:40 executing program 3:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:40 executing program 0:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)

09:25:40 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:40 executing program 5:
syz_io_uring_setup(0x1149, 0x0, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:40 executing program 1:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:40 executing program 2:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:40 executing program 0:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)

09:25:40 executing program 3:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)

09:25:40 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:40 executing program 5:
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:40 executing program 1:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:40 executing program 3:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)

09:25:40 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00'}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:40 executing program 5:
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:40 executing program 0:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:40 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

[ 1001.163773][ T7384] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:40 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:41 executing program 3:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:41 executing program 2:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:41 executing program 5:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:41 executing program 0:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, 0x0, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:41 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:41 executing program 3:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:41 executing program 2:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:41 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:41 executing program 5:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:41 executing program 0:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:41 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:41 executing program 3:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:41 executing program 2:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00)
sendmsg$rds(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8f5}}], 0x18, 0x40810}, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4880)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x100, @private2, 0x1}}}, {&(0x7f0000000940)=""/254, 0xfe}, &(0x7f0000000a40), 0x6c}, 0xa0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x200, 0x400, 0x1}, 0xffffffff)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)

09:25:41 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:41 executing program 5:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:41 executing program 0:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:41 executing program 1:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r7, 0x0, 0x0)

[ 1001.810214][ T7433] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:41 executing program 3:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r7, 0x0, 0x0)

09:25:41 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:41 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:41 executing program 5:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:41 executing program 0:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:41 executing program 1:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
r3 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0x10000000)

09:25:41 executing program 3:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)

09:25:41 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:41 executing program 2:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
r3 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))

09:25:41 executing program 5:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:42 executing program 0:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
r3 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))

09:25:42 executing program 1:
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0x93)
r3 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r4=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r3}, 0x93)

09:25:42 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:42 executing program 5:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:42 executing program 3:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:42 executing program 2:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)

09:25:42 executing program 0:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
r4 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000)
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r4}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)

09:25:42 executing program 1 (fault-call:1 fault-nth:0):
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:42 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:42 executing program 5:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x1149, 0x0, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

[ 1002.645157][ T7503] FAULT_INJECTION: forcing a failure.
[ 1002.645157][ T7503] name fail_usercopy, interval 1, probability 0, space 0, times 0
09:25:42 executing program 3 (fault-call:12 fault-nth:0):
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00'}, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x0, @rand_addr=0x64010101}, 0x10)

09:25:42 executing program 0 (fault-call:1 fault-nth:0):
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

[ 1002.736648][ T7503] CPU: 1 PID: 7503 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0
[ 1002.745129][ T7503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1002.755199][ T7503] Call Trace:
[ 1002.758490][ T7503]  dump_stack+0x202/0x31e
[ 1002.762856][ T7503]  ? show_regs_print_info+0x12/0x12
[ 1002.768092][ T7503]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 1002.773831][ T7503]  ? __might_fault+0xb8/0x110
[ 1002.778540][ T7503]  should_fail+0x384/0x4b0
09:25:42 executing program 2 (fault-call:1 fault-nth:0):
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

[ 1002.782976][ T7503]  _copy_from_user+0x2d/0x170
[ 1002.787671][ T7503]  __se_sys_io_uring_setup+0xa2/0x3100
[ 1002.793243][ T7503]  ? __context_tracking_exit+0x7a/0xd0
[ 1002.798727][ T7503]  ? __lock_acquire+0x6040/0x6040
[ 1002.803808][ T7503]  ? __x64_sys_io_uring_setup+0x60/0x60
[ 1002.809363][ T7503]  ? lockdep_hardirqs_on_prepare+0x3e2/0x750
[ 1002.815376][ T7503]  ? print_irqtrace_events+0x220/0x220
[ 1002.820841][ T7503]  ? vtime_user_exit+0x2b2/0x3e0
[ 1002.825386][ T7514] FAULT_INJECTION: forcing a failure.
[ 1002.825386][ T7514] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1002.825846][ T7503]  ? syscall_enter_from_user_mode+0x2e/0x1c0
[ 1002.825890][ T7503]  ? lockdep_hardirqs_on+0x8d/0x130
[ 1002.825909][ T7503]  ? syscall_enter_from_user_mode+0x2e/0x1c0
[ 1002.856152][ T7503]  do_syscall_64+0x3f/0xb0
[ 1002.860614][ T7503]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1002.866501][ T7503] RIP: 0033:0x4665f9
[ 1002.870516][ T7503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1002.890108][ T7503] RSP: 002b:00007fd1fbc4b108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1002.898591][ T7503] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9
[ 1002.906548][ T7503] RDX: 0000000020ff7000 RSI: 0000000020000000 RDI: 0000000000001149
[ 1002.914511][ T7503] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0
[ 1002.922472][ T7503] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0
09:25:42 executing program 5:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x1149, 0x0, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

[ 1002.930431][ T7503] R13: 0000000020ff7000 R14: 0000000020000080 R15: 0000000020ff0000
09:25:42 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

[ 1003.012753][ T7514] CPU: 1 PID: 7514 Comm: syz-executor.0 Not tainted 5.12.0-syzkaller #0
[ 1003.021414][ T7514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1003.031482][ T7514] Call Trace:
[ 1003.034774][ T7514]  dump_stack+0x202/0x31e
[ 1003.039121][ T7514]  ? show_regs_print_info+0x12/0x12
[ 1003.044349][ T7514]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 1003.050083][ T7514]  ? __might_fault+0xb8/0x110
[ 1003.054783][ T7514]  should_fail+0x384/0x4b0
[ 1003.059217][ T7514]  _copy_from_user+0x2d/0x170
[ 1003.063911][ T7514]  __se_sys_io_uring_setup+0xa2/0x3100
[ 1003.069411][ T7514]  ? __context_tracking_exit+0x7a/0xd0
[ 1003.074883][ T7514]  ? __lock_acquire+0x6040/0x6040
[ 1003.079924][ T7514]  ? __x64_sys_io_uring_setup+0x60/0x60
[ 1003.085470][ T7514]  ? lockdep_hardirqs_on_prepare+0x3e2/0x750
[ 1003.091470][ T7514]  ? print_irqtrace_events+0x220/0x220
[ 1003.096957][ T7514]  ? vtime_user_exit+0x2b2/0x3e0
[ 1003.101888][ T7514]  ? syscall_enter_from_user_mode+0x2e/0x1c0
[ 1003.107855][ T7514]  ? lockdep_hardirqs_on+0x8d/0x130
[ 1003.113130][ T7514]  ? syscall_enter_from_user_mode+0x2e/0x1c0
[ 1003.119102][ T7514]  do_syscall_64+0x3f/0xb0
[ 1003.123508][ T7514]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1003.129393][ T7514] RIP: 0033:0x4665f9
[ 1003.133275][ T7514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1003.152870][ T7514] RSP: 002b:00007ff0b6af9108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1003.161280][ T7514] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9
[ 1003.169240][ T7514] RDX: 0000000020ff7000 RSI: 0000000020000000 RDI: 0000000000001149
[ 1003.177210][ T7514] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0
[ 1003.185180][ T7514] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0
[ 1003.193141][ T7514] R13: 0000000020ff7000 R14: 0000000020000080 R15: 0000000020ff0000
[ 1003.202969][ T7518] FAULT_INJECTION: forcing a failure.
[ 1003.202969][ T7518] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1003.220363][ T7518] CPU: 0 PID: 7518 Comm: syz-executor.2 Not tainted 5.12.0-syzkaller #0
[ 1003.228816][ T7518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1003.238891][ T7518] Call Trace:
[ 1003.242178][ T7518]  dump_stack+0x202/0x31e
[ 1003.246525][ T7518]  ? show_regs_print_info+0x12/0x12
[ 1003.251730][ T7518]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 1003.257460][ T7518]  ? __might_fault+0xb8/0x110
[ 1003.262183][ T7518]  should_fail+0x384/0x4b0
[ 1003.266623][ T7518]  _copy_from_user+0x2d/0x170
[ 1003.271319][ T7518]  __se_sys_io_uring_setup+0xa2/0x3100
[ 1003.276812][ T7518]  ? __context_tracking_exit+0x7a/0xd0
[ 1003.282308][ T7518]  ? __lock_acquire+0x6040/0x6040
[ 1003.287363][ T7518]  ? __x64_sys_io_uring_setup+0x60/0x60
[ 1003.292921][ T7518]  ? lockdep_hardirqs_on_prepare+0x3e2/0x750
[ 1003.299008][ T7518]  ? print_irqtrace_events+0x220/0x220
[ 1003.304485][ T7518]  ? vtime_user_exit+0x2b2/0x3e0
[ 1003.309442][ T7518]  ? syscall_enter_from_user_mode+0x2e/0x1c0
[ 1003.315526][ T7518]  ? lockdep_hardirqs_on+0x8d/0x130
[ 1003.320739][ T7518]  ? syscall_enter_from_user_mode+0x2e/0x1c0
[ 1003.326740][ T7518]  do_syscall_64+0x3f/0xb0
[ 1003.331261][ T7518]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1003.337170][ T7518] RIP: 0033:0x4665f9
[ 1003.341096][ T7518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
09:25:43 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

[ 1003.360712][ T7518] RSP: 002b:00007f37865b4108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1003.369138][ T7518] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9
[ 1003.377135][ T7518] RDX: 0000000020ff7000 RSI: 0000000020000000 RDI: 0000000000001149
[ 1003.385118][ T7518] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0
[ 1003.393103][ T7518] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0
[ 1003.401241][ T7518] R13: 0000000020ff7000 R14: 0000000020000080 R15: 0000000020ff0000
09:25:43 executing program 5:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x1149, 0x0, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

[ 1003.484929][ T7519] FAULT_INJECTION: forcing a failure.
[ 1003.484929][ T7519] name fail_usercopy, interval 1, probability 0, space 0, times 0
09:25:43 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

[ 1003.528039][ T7519] CPU: 1 PID: 7519 Comm: syz-executor.3 Not tainted 5.12.0-syzkaller #0
[ 1003.536409][ T7519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1003.546569][ T7519] Call Trace:
[ 1003.549842][ T7519]  dump_stack+0x202/0x31e
[ 1003.554189][ T7519]  ? show_regs_print_info+0x12/0x12
[ 1003.559388][ T7519]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 1003.565101][ T7519]  ? __might_fault+0xb8/0x110
[ 1003.569772][ T7519]  should_fail+0x384/0x4b0
[ 1003.574181][ T7519]  _copy_from_user+0x2d/0x170
[ 1003.578846][ T7519]  __sys_bind+0x1e0/0x3f0
[ 1003.583224][ T7519]  ? __ia32_sys_socketpair+0xb0/0xb0
[ 1003.588505][ T7519]  ? lockdep_hardirqs_on_prepare+0x3e2/0x750
[ 1003.594478][ T7519]  ? print_irqtrace_events+0x220/0x220
[ 1003.599929][ T7519]  ? vtime_user_exit+0x2b2/0x3e0
[ 1003.604855][ T7519]  ? syscall_enter_from_user_mode+0x2e/0x1c0
[ 1003.610830][ T7519]  ? lockdep_hardirqs_on+0x8d/0x130
[ 1003.616017][ T7519]  __x64_sys_bind+0x76/0x80
[ 1003.620600][ T7519]  do_syscall_64+0x3f/0xb0
[ 1003.625010][ T7519]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1003.630892][ T7519] RIP: 0033:0x4665f9
[ 1003.634774][ T7519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1003.654368][ T7519] RSP: 002b:00007efe835ea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[ 1003.662893][ T7519] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9
[ 1003.670867][ T7519] RDX: 0000000000000010 RSI: 0000000020000200 RDI: 0000000000000004
09:25:43 executing program 2 (fault-call:1 fault-nth:1):
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

[ 1003.678825][ T7519] RBP: 00007efe835ea1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1003.686784][ T7519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1003.694744][ T7519] R13: 00007fff685039cf R14: 00007efe835ea300 R15: 0000000000022000
09:25:43 executing program 0 (fault-call:1 fault-nth:1):
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:43 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:43 executing program 5:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

[ 1003.814884][ T7540] FAULT_INJECTION: forcing a failure.
[ 1003.814884][ T7540] name failslab, interval 1, probability 0, space 0, times 1
[ 1003.865989][ T7542] FAULT_INJECTION: forcing a failure.
[ 1003.865989][ T7542] name failslab, interval 1, probability 0, space 0, times 1
[ 1003.878600][ T7540] CPU: 1 PID: 7540 Comm: syz-executor.2 Not tainted 5.12.0-syzkaller #0
[ 1003.878620][ T7540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1003.878631][ T7540] Call Trace:
[ 1003.878639][ T7540]  dump_stack+0x202/0x31e
[ 1003.878664][ T7540]  ? show_regs_print_info+0x12/0x12
[ 1003.878681][ T7540]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 1003.878703][ T7540]  ? __fs_reclaim_acquire+0x30/0x30
[ 1003.920923][ T7540]  ? __might_sleep+0x100/0x100
[ 1003.925747][ T7540]  ? __might_fault+0xb8/0x110
[ 1003.930458][ T7540]  should_fail+0x384/0x4b0
[ 1003.934904][ T7540]  ? __se_sys_io_uring_setup+0x372/0x3100
[ 1003.940635][ T7540]  should_failslab+0x5/0x20
[ 1003.945174][ T7540]  kmem_cache_alloc_trace+0x6a/0x350
[ 1003.950499][ T7540]  __se_sys_io_uring_setup+0x372/0x3100
[ 1003.956059][ T7540]  ? __context_tracking_exit+0x7a/0xd0
[ 1003.961525][ T7540]  ? __lock_acquire+0x6040/0x6040
[ 1003.966558][ T7540]  ? __x64_sys_io_uring_setup+0x60/0x60
[ 1003.972105][ T7540]  ? lockdep_hardirqs_on_prepare+0x3e2/0x750
[ 1003.978107][ T7540]  ? syscall_enter_from_user_mode+0x2e/0x1c0
[ 1003.984089][ T7540]  ? lockdep_hardirqs_on+0x8d/0x130
[ 1003.989339][ T7540]  ? syscall_enter_from_user_mode+0x2e/0x1c0
[ 1003.995320][ T7540]  do_syscall_64+0x3f/0xb0
[ 1003.999753][ T7540]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1004.005670][ T7540] RIP: 0033:0x4665f9
[ 1004.009594][ T7540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1004.029294][ T7540] RSP: 002b:00007f37865b4108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1004.037774][ T7540] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9
[ 1004.045798][ T7540] RDX: 0000000020ff7000 RSI: 0000000020000000 RDI: 0000000000001149
[ 1004.053773][ T7540] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0
[ 1004.061851][ T7540] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0
[ 1004.069915][ T7540] R13: 0000000020ff7000 R14: 0000000020000080 R15: 0000000020ff0000
[ 1004.103806][ T7542] CPU: 0 PID: 7542 Comm: syz-executor.0 Not tainted 5.12.0-syzkaller #0
[ 1004.112227][ T7542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1004.122383][ T7542] Call Trace:
[ 1004.125676][ T7542]  dump_stack+0x202/0x31e
[ 1004.130109][ T7542]  ? show_regs_print_info+0x12/0x12
[ 1004.135328][ T7542]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 1004.141069][ T7542]  ? __fs_reclaim_acquire+0x30/0x30
[ 1004.146284][ T7542]  ? __might_sleep+0x100/0x100
[ 1004.151062][ T7542]  ? __might_fault+0xb8/0x110
[ 1004.155763][ T7542]  should_fail+0x384/0x4b0
[ 1004.160197][ T7542]  ? __se_sys_io_uring_setup+0x372/0x3100
[ 1004.165937][ T7542]  should_failslab+0x5/0x20
[ 1004.170455][ T7542]  kmem_cache_alloc_trace+0x6a/0x350
[ 1004.175765][ T7542]  __se_sys_io_uring_setup+0x372/0x3100
[ 1004.181340][ T7542]  ? __context_tracking_exit+0x7a/0xd0
[ 1004.186815][ T7542]  ? __lock_acquire+0x6040/0x6040
[ 1004.191865][ T7542]  ? __x64_sys_io_uring_setup+0x60/0x60
[ 1004.197421][ T7542]  ? lockdep_hardirqs_on_prepare+0x3e2/0x750
[ 1004.203631][ T7542]  ? syscall_enter_from_user_mode+0x2e/0x1c0
[ 1004.209639][ T7542]  ? lockdep_hardirqs_on+0x8d/0x130
[ 1004.214846][ T7542]  ? syscall_enter_from_user_mode+0x2e/0x1c0
[ 1004.220926][ T7542]  do_syscall_64+0x3f/0xb0
[ 1004.225355][ T7542]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1004.231273][ T7542] RIP: 0033:0x4665f9
[ 1004.235190][ T7542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1004.254993][ T7542] RSP: 002b:00007ff0b6af9108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1004.263426][ T7542] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9
[ 1004.271410][ T7542] RDX: 0000000020ff7000 RSI: 0000000020000000 RDI: 0000000000001149
[ 1004.279479][ T7542] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0
[ 1004.287463][ T7542] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0
[ 1004.295533][ T7542] R13: 0000000020ff7000 R14: 0000000020000080 R15: 0000000020ff0000
09:25:44 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00'}, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x0, @rand_addr=0x64010101}, 0x10)

09:25:44 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:44 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:44 executing program 5:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:44 executing program 2 (fault-call:1 fault-nth:2):
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:44 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

[ 1004.470984][ T7559] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[ 1004.516394][ T7565] FAULT_INJECTION: forcing a failure.
[ 1004.516394][ T7565] name failslab, interval 1, probability 0, space 0, times 0
[ 1004.550755][ T7565] CPU: 1 PID: 7565 Comm: syz-executor.2 Not tainted 5.12.0-syzkaller #0
09:25:44 executing program 5:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

[ 1004.559216][ T7565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1004.569299][ T7565] Call Trace:
[ 1004.572596][ T7565]  dump_stack+0x202/0x31e
[ 1004.576951][ T7565]  ? show_regs_print_info+0x12/0x12
[ 1004.582169][ T7565]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 1004.587921][ T7565]  ? __fs_reclaim_acquire+0x30/0x30
[ 1004.593240][ T7565]  ? __might_sleep+0x100/0x100
[ 1004.598052][ T7565]  ? __se_sys_io_uring_setup+0x372/0x3100
[ 1004.603786][ T7565]  ? rcu_read_lock_sched_held+0x87/0x110
[ 1004.609484][ T7565]  should_fail+0x384/0x4b0
[ 1004.613939][ T7565]  ? __se_sys_io_uring_setup+0x439/0x3100
[ 1004.619662][ T7565]  should_failslab+0x5/0x20
[ 1004.624253][ T7565]  __kmalloc+0x89/0x380
[ 1004.628403][ T7565]  ? __se_sys_io_uring_setup+0x372/0x3100
[ 1004.634149][ T7565]  __se_sys_io_uring_setup+0x439/0x3100
[ 1004.639702][ T7565]  ? __context_tracking_exit+0x7a/0xd0
[ 1004.645162][ T7565]  ? __x64_sys_io_uring_setup+0x60/0x60
[ 1004.650701][ T7565]  ? lockdep_hardirqs_on_prepare+0x3e2/0x750
[ 1004.656683][ T7565]  ? syscall_enter_from_user_mode+0x2e/0x1c0
[ 1004.662657][ T7565]  ? lockdep_hardirqs_on+0x8d/0x130
[ 1004.667898][ T7565]  ? syscall_enter_from_user_mode+0x2e/0x1c0
[ 1004.673873][ T7565]  do_syscall_64+0x3f/0xb0
[ 1004.678288][ T7565]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1004.684176][ T7565] RIP: 0033:0x4665f9
[ 1004.688505][ T7565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1004.708102][ T7565] RSP: 002b:00007f37865b4108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
09:25:44 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:44 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00'}, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x3, 0x0, @rand_addr=0x64010101}, 0x10)

[ 1004.716508][ T7565] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9
[ 1004.724469][ T7565] RDX: 0000000020ff7000 RSI: 0000000020000000 RDI: 0000000000001149
[ 1004.732438][ T7565] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0
[ 1004.740398][ T7565] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0
[ 1004.748357][ T7565] R13: 0000000020ff7000 R14: 0000000020000080 R15: 0000000020ff0000
09:25:44 executing program 0:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:44 executing program 5:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, &(0x7f00000000c0))

09:25:44 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:44 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:44 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00'}, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x4, 0x0, @rand_addr=0x64010101}, 0x10)

09:25:44 executing program 2 (fault-call:1 fault-nth:3):
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:44 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00'}, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x5, 0x0, @rand_addr=0x64010101}, 0x10)

09:25:44 executing program 5:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, &(0x7f00000000c0))

09:25:44 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:44 executing program 0:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:44 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

[ 1005.190013][ T7595] FAULT_INJECTION: forcing a failure.
[ 1005.190013][ T7595] name failslab, interval 1, probability 0, space 0, times 0
[ 1005.260258][ T7595] CPU: 1 PID: 7595 Comm: syz-executor.2 Not tainted 5.12.0-syzkaller #0
[ 1005.268753][ T7595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1005.278929][ T7595] Call Trace:
[ 1005.282225][ T7595]  dump_stack+0x202/0x31e
[ 1005.286578][ T7595]  ? show_regs_print_info+0x12/0x12
[ 1005.291799][ T7595]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 1005.297544][ T7595]  ? __fs_reclaim_acquire+0x30/0x30
[ 1005.302762][ T7595]  ? __might_sleep+0x100/0x100
09:25:45 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

[ 1005.307554][ T7595]  should_fail+0x384/0x4b0
[ 1005.312081][ T7595]  ? percpu_ref_init+0xce/0x300
[ 1005.316962][ T7595]  should_failslab+0x5/0x20
[ 1005.321478][ T7595]  kmem_cache_alloc_trace+0x6a/0x350
[ 1005.326786][ T7595]  percpu_ref_init+0xce/0x300
[ 1005.331477][ T7595]  ? trace_io_uring_create+0x250/0x250
[ 1005.336958][ T7595]  __se_sys_io_uring_setup+0x4a9/0x3100
[ 1005.342533][ T7595]  ? __context_tracking_exit+0x7a/0xd0
[ 1005.348022][ T7595]  ? __x64_sys_io_uring_setup+0x60/0x60
[ 1005.353581][ T7595]  ? lockdep_hardirqs_on_prepare+0x3e2/0x750
[ 1005.359571][ T7595]  ? syscall_enter_from_user_mode+0x2e/0x1c0
[ 1005.365543][ T7595]  ? lockdep_hardirqs_on+0x8d/0x130
[ 1005.370731][ T7595]  ? syscall_enter_from_user_mode+0x2e/0x1c0
[ 1005.376745][ T7595]  do_syscall_64+0x3f/0xb0
[ 1005.381192][ T7595]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1005.387090][ T7595] RIP: 0033:0x4665f9
[ 1005.390982][ T7595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1005.410670][ T7595] RSP: 002b:00007f37865b4108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1005.419081][ T7595] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9
[ 1005.427105][ T7595] RDX: 0000000020ff7000 RSI: 0000000020000000 RDI: 0000000000001149
[ 1005.435166][ T7595] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0
[ 1005.443147][ T7595] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0
[ 1005.451131][ T7595] R13: 0000000020ff7000 R14: 0000000020000080 R15: 0000000020ff0000
09:25:45 executing program 5:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, &(0x7f00000000c0))

09:25:45 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00'}, 0x0)
bind$rds(r0, &(0x7f0000000200)={0xa, 0x0, @rand_addr=0x64010101}, 0x10)

09:25:45 executing program 0:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:45 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f00000001c0))
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:45 executing program 5:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)

09:25:45 executing program 2 (fault-call:1 fault-nth:4):
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:45 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:45 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00'}, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x18, 0x0, @rand_addr=0x64010101}, 0x10)

09:25:45 executing program 0:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:45 executing program 5:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)

09:25:45 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:45 executing program 5:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)

09:25:45 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

[ 1005.924830][ T7640] FAULT_INJECTION: forcing a failure.
[ 1005.924830][ T7640] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[ 1006.003060][ T7640] CPU: 1 PID: 7640 Comm: syz-executor.2 Not tainted 5.12.0-syzkaller #0
[ 1006.011439][ T7640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1006.021507][ T7640] Call Trace:
[ 1006.024808][ T7640]  dump_stack+0x202/0x31e
[ 1006.029250][ T7640]  ? show_regs_print_info+0x12/0x12
[ 1006.034465][ T7640]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 1006.040208][ T7640]  ? __fs_reclaim_acquire+0x30/0x30
[ 1006.045424][ T7640]  ? __might_sleep+0x100/0x100
[ 1006.050214][ T7640]  should_fail+0x384/0x4b0
[ 1006.054650][ T7640]  prepare_alloc_pages+0x1ca/0x5b0
[ 1006.059784][ T7640]  __alloc_pages_nodemask+0x129/0x5a0
[ 1006.065189][ T7640]  ? gfp_pfmemalloc_allowed+0x120/0x120
[ 1006.070836][ T7640]  ? lockdep_init_map_type+0x9f/0x9a0
[ 1006.076231][ T7640]  ? bpf_lsm_capable+0x5/0x10
[ 1006.080969][ T7640]  ? security_capable+0xb1/0xd0
[ 1006.085831][ T7640]  ? alloc_pages_current+0x2e5/0x520
[ 1006.091189][ T7640]  __get_free_pages+0x8/0x30
[ 1006.095774][ T7640]  __se_sys_io_uring_setup+0xeff/0x3100
[ 1006.101338][ T7640]  ? __context_tracking_exit+0x7a/0xd0
[ 1006.106796][ T7640]  ? __x64_sys_io_uring_setup+0x60/0x60
[ 1006.112332][ T7640]  ? lockdep_hardirqs_on_prepare+0x3e2/0x750
[ 1006.118309][ T7640]  ? syscall_enter_from_user_mode+0x2e/0x1c0
[ 1006.124278][ T7640]  ? lockdep_hardirqs_on+0x8d/0x130
[ 1006.129469][ T7640]  ? syscall_enter_from_user_mode+0x2e/0x1c0
[ 1006.135530][ T7640]  do_syscall_64+0x3f/0xb0
[ 1006.139934][ T7640]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1006.145816][ T7640] RIP: 0033:0x4665f9
[ 1006.149706][ T7640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1006.169741][ T7640] RSP: 002b:00007f37865b4108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1006.178406][ T7640] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9
[ 1006.186367][ T7640] RDX: 0000000020ff7000 RSI: 0000000020000000 RDI: 0000000000001149
[ 1006.194328][ T7640] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0
09:25:46 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00'}, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x1b, 0x0, @rand_addr=0x64010101}, 0x10)

09:25:46 executing program 0:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:46 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

[ 1006.202288][ T7640] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0
[ 1006.210247][ T7640] R13: 0000000020ff7000 R14: 0000000020000080 R15: 0000000020ff0000
09:25:46 executing program 5:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:46 executing program 2 (fault-call:1 fault-nth:5):
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:46 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:46 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0xa}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:46 executing program 0:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:46 executing program 5:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

[ 1006.430172][ T7666] FAULT_INJECTION: forcing a failure.
[ 1006.430172][ T7666] name fail_page_alloc, interval 1, probability 0, space 0, times 0
09:25:46 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00'}, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x0, @rand_addr=0x64010101}, 0x10)

09:25:46 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

[ 1006.557018][ T7666] CPU: 0 PID: 7666 Comm: syz-executor.2 Not tainted 5.12.0-syzkaller #0
[ 1006.565499][ T7666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1006.575568][ T7666] Call Trace:
[ 1006.578858][ T7666]  dump_stack+0x202/0x31e
[ 1006.583211][ T7666]  ? show_regs_print_info+0x12/0x12
[ 1006.588457][ T7666]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 1006.594196][ T7666]  ? __fs_reclaim_acquire+0x30/0x30
[ 1006.599408][ T7666]  ? __might_sleep+0x100/0x100
[ 1006.604232][ T7666]  should_fail+0x384/0x4b0
[ 1006.608671][ T7666]  prepare_alloc_pages+0x1ca/0x5b0
[ 1006.613847][ T7666]  __alloc_pages_nodemask+0x129/0x5a0
[ 1006.619241][ T7666]  ? gfp_pfmemalloc_allowed+0x120/0x120
[ 1006.624800][ T7666]  ? lockdep_init_map_type+0x9f/0x9a0
[ 1006.630253][ T7666]  ? bpf_lsm_capable+0x5/0x10
[ 1006.635009][ T7666]  ? security_capable+0xb1/0xd0
[ 1006.639882][ T7666]  ? alloc_pages_current+0x2e5/0x520
[ 1006.645188][ T7666]  __get_free_pages+0x8/0x30
[ 1006.649791][ T7666]  __se_sys_io_uring_setup+0x10b2/0x3100
[ 1006.655445][ T7666]  ? __context_tracking_exit+0x7a/0xd0
[ 1006.660933][ T7666]  ? __x64_sys_io_uring_setup+0x60/0x60
[ 1006.666499][ T7666]  ? lockdep_hardirqs_on_prepare+0x3e2/0x750
[ 1006.672524][ T7666]  ? syscall_enter_from_user_mode+0x2e/0x1c0
[ 1006.678518][ T7666]  ? lockdep_hardirqs_on+0x8d/0x130
[ 1006.683732][ T7666]  ? syscall_enter_from_user_mode+0x2e/0x1c0
[ 1006.689819][ T7666]  do_syscall_64+0x3f/0xb0
[ 1006.694250][ T7666]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1006.700165][ T7666] RIP: 0033:0x4665f9
[ 1006.704088][ T7666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1006.723709][ T7666] RSP: 002b:00007f37865b4108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1006.732226][ T7666] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9
[ 1006.740214][ T7666] RDX: 0000000020ff7000 RSI: 0000000020000000 RDI: 0000000000001149
[ 1006.748198][ T7666] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0
09:25:46 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0xf}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:46 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x10}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:46 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x1e}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:46 executing program 0:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

[ 1006.756195][ T7666] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0
[ 1006.764285][ T7666] R13: 0000000020ff7000 R14: 0000000020000080 R15: 0000000020ff0000
09:25:46 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x24}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

[ 1006.884646][ T7693] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[ 1006.943126][ T7701] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:46 executing program 2 (fault-call:1 fault-nth:6):
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:46 executing program 5:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0xf}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:46 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00'}, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x2, @rand_addr=0x64010101}, 0x10)

09:25:46 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3f7e, 0x10, 0x0, 0x23d}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

09:25:46 executing program 0:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:46 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x2a}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

[ 1007.116046][ T7708] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
09:25:46 executing program 5:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

[ 1007.191391][ T7716] FAULT_INJECTION: forcing a failure.
[ 1007.191391][ T7716] name failslab, interval 1, probability 0, space 0, times 0
[ 1007.221702][ T7718] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[ 1007.232800][ T7716] CPU: 1 PID: 7716 Comm: syz-executor.2 Not tainted 5.12.0-syzkaller #0
09:25:47 executing program 0:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

[ 1007.241149][ T7716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1007.251204][ T7716] Call Trace:
[ 1007.254497][ T7716]  dump_stack+0x202/0x31e
[ 1007.258846][ T7716]  ? show_regs_print_info+0x12/0x12
[ 1007.264055][ T7716]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 1007.269792][ T7716]  ? __fs_reclaim_acquire+0x30/0x30
[ 1007.275004][ T7716]  ? __might_sleep+0x100/0x100
[ 1007.279784][ T7716]  should_fail+0x384/0x4b0
[ 1007.284213][ T7716]  ? __se_sys_io_uring_setup+0x1ff4/0x3100
[ 1007.290029][ T7716]  should_failslab+0x5/0x20
[ 1007.294537][ T7716]  kmem_cache_alloc_trace+0x6a/0x350
[ 1007.299821][ T7716]  ? alloc_pages_current+0x2e5/0x520
[ 1007.305103][ T7716]  __se_sys_io_uring_setup+0x1ff4/0x3100
[ 1007.310727][ T7716]  ? __context_tracking_exit+0x7a/0xd0
[ 1007.316178][ T7716]  ? __x64_sys_io_uring_setup+0x60/0x60
[ 1007.321706][ T7716]  ? lockdep_hardirqs_on_prepare+0x3e2/0x750
[ 1007.327688][ T7716]  ? syscall_enter_from_user_mode+0x2e/0x1c0
[ 1007.333650][ T7716]  ? lockdep_hardirqs_on+0x8d/0x130
[ 1007.338832][ T7716]  ? syscall_enter_from_user_mode+0x2e/0x1c0
[ 1007.344800][ T7716]  do_syscall_64+0x3f/0xb0
[ 1007.349196][ T7716]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1007.355205][ T7716] RIP: 0033:0x4665f9
[ 1007.359082][ T7716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1007.378664][ T7716] RSP: 002b:00007f37865b4108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
09:25:47 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x30}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

09:25:47 executing program 4:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0)
r1 = syz_io_uring_setup(0x1149, 0x0, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x4a46, &(0x7f0000000100)={0x0, 0x86ac, 0x2, 0x0, 0x11b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r1}, 0x93)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000240)=0x8, 0x0, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4)
bind$can_raw(r4, 0x0, 0x0)

[ 1007.387062][ T7716] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9
[ 1007.395022][ T7716] RDX: 0000000020ff7000 RSI: 0000000020000000 RDI: 0000000000001149
[ 1007.403070][ T7716] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0
[ 1007.411025][ T7716] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0
[ 1007.418979][ T7716] R13: 0000000020ff7000 R14: 0000000020000080 R15: 0000000020ff0000
09:25:47 executing program 3:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00)
sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00'}, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x3, @rand_addr=0x64010101}, 0x10)

09:25:47 executing program 1:
syz_io_uring_setup(0x1149, &(0x7f0000000000), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x1149, &(0x7f0000000000)={0x0, 0x36}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

[ 1007.583407][ T7732] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[ 1007.621880][ T7735] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[ 1007.744008][ T7716] ------------[ cut here ]------------
[ 1007.750188][ T7716] WARNING: CPU: 1 PID: 7716 at fs/io_uring.c:7081 __se_sys_io_uring_setup+0x2059/0x3100
[ 1007.771023][ T7716] Modules linked in:
[ 1007.777726][ T7716] CPU: 1 PID: 7716 Comm: syz-executor.2 Not tainted 5.12.0-syzkaller #0
[ 1007.797313][ T7716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1007.819580][ T7716] RIP: 0010:__se_sys_io_uring_setup+0x2059/0x3100
[ 1007.826162][ T7716] Code: dc ff eb 05 e8 78 09 97 ff 48 b8 00 00 00 00 00 fc ff df 41 80 7c 05 00 00 74 08 4c 89 ff e8 ce a1 dd ff 49 c7 07 00 00 00 00 <0f> 0b e9 e1 00 00 00 e8 4b 09 97 ff 49 8d 5c 24 10 48 89 d8 48 c1
[ 1007.848417][ T7716] RSP: 0018:ffffc9001b73fd00 EFLAGS: 00010246
[ 1007.856029][ T7716] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000040000
[ 1007.873555][ T7716] RDX: ffffc9000cd46000 RSI: 000000000003ffff RDI: 0000000000040000
[ 1007.888258][ T7716] RBP: ffffc9001b73ff20 R08: 0000000000000dc0 R09: fffffbfff19bc9e3
[ 1007.898279][ T7716] R10: fffffbfff19bc9e3 R11: 0000000000000000 R12: ffff88815598010c
[ 1007.907629][ T7716] R13: 1ffff1100f177501 R14: 0000000000000000 R15: ffff888078bba808
[ 1007.917229][ T7716] FS:  00007f37865b4700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 1007.928019][ T7716] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1007.950224][ T7716] CR2: 000055cb46894160 CR3: 0000000151faa000 CR4: 00000000001506f0
[ 1007.958250][ T7716] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1007.966613][ T7716] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1007.975175][ T7716] Call Trace:
[ 1007.978481][ T7716]  ? __context_tracking_exit+0x7a/0xd0
[ 1007.984046][ T7716]  ? __x64_sys_io_uring_setup+0x60/0x60
[ 1007.990238][ T7716]  ? lockdep_hardirqs_on_prepare+0x3e2/0x750
[ 1007.996260][ T7716]  ? syscall_enter_from_user_mode+0x2e/0x1c0
[ 1008.003767][ T7716]  ? lockdep_hardirqs_on+0x8d/0x130
[ 1008.014025][ T7716]  ? syscall_enter_from_user_mode+0x2e/0x1c0
[ 1008.021407][ T7716]  do_syscall_64+0x3f/0xb0
[ 1008.025855][ T7716]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1008.033253][ T7716] RIP: 0033:0x4665f9
[ 1008.037267][ T7716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1008.057510][ T7716] RSP: 002b:00007f37865b4108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1008.066054][ T7716] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9
[ 1008.074403][ T7716] RDX: 0000000020ff7000 RSI: 0000000020000000 RDI: 0000000000001149
[ 1008.082805][ T7716] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0
[ 1008.091078][ T7716] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0
[ 1008.100138][ T7716] R13: 0000000020ff7000 R14: 0000000020000080 R15: 0000000020ff0000
[ 1008.108138][ T7716] Kernel panic - not syncing: panic_on_warn set ...
[ 1008.114705][ T7716] CPU: 0 PID: 7716 Comm: syz-executor.2 Not tainted 5.12.0-syzkaller #0
[ 1008.123068][ T7716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1008.133123][ T7716] Call Trace:
[ 1008.136395][ T7716]  dump_stack+0x202/0x31e
[ 1008.140746][ T7716]  ? show_regs_print_info+0x12/0x12
[ 1008.145930][ T7716]  ? log_buf_vmcoreinfo_setup+0x498/0x498
[ 1008.151657][ T7716]  panic+0x2e1/0x850
[ 1008.155593][ T7716]  ? __kernel_text_address+0x93/0x100
[ 1008.161016][ T7716]  ? __warn+0x13e/0x270
[ 1008.165157][ T7716]  ? nmi_panic+0x90/0x90
[ 1008.169389][ T7716]  __warn+0x26a/0x270
[ 1008.173354][ T7716]  ? __se_sys_io_uring_setup+0x2059/0x3100
[ 1008.179141][ T7716]  ? __se_sys_io_uring_setup+0x2059/0x3100
[ 1008.185030][ T7716]  report_bug+0x1b1/0x2e0
[ 1008.189431][ T7716]  handle_bug+0x3d/0x70
[ 1008.193573][ T7716]  exc_invalid_op+0x16/0x40
[ 1008.198066][ T7716]  asm_exc_invalid_op+0x12/0x20
[ 1008.202925][ T7716] RIP: 0010:__se_sys_io_uring_setup+0x2059/0x3100
[ 1008.209319][ T7716] Code: dc ff eb 05 e8 78 09 97 ff 48 b8 00 00 00 00 00 fc ff df 41 80 7c 05 00 00 74 08 4c 89 ff e8 ce a1 dd ff 49 c7 07 00 00 00 00 <0f> 0b e9 e1 00 00 00 e8 4b 09 97 ff 49 8d 5c 24 10 48 89 d8 48 c1
[ 1008.228903][ T7716] RSP: 0018:ffffc9001b73fd00 EFLAGS: 00010246
[ 1008.234967][ T7716] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000040000
[ 1008.242922][ T7716] RDX: ffffc9000cd46000 RSI: 000000000003ffff RDI: 0000000000040000
[ 1008.250876][ T7716] RBP: ffffc9001b73ff20 R08: 0000000000000dc0 R09: fffffbfff19bc9e3
[ 1008.258828][ T7716] R10: fffffbfff19bc9e3 R11: 0000000000000000 R12: ffff88815598010c
[ 1008.266839][ T7716] R13: 1ffff1100f177501 R14: 0000000000000000 R15: ffff888078bba808
[ 1008.274803][ T7716]  ? __context_tracking_exit+0x7a/0xd0
[ 1008.280260][ T7716]  ? __x64_sys_io_uring_setup+0x60/0x60
[ 1008.285789][ T7716]  ? lockdep_hardirqs_on_prepare+0x3e2/0x750
[ 1008.291754][ T7716]  ? syscall_enter_from_user_mode+0x2e/0x1c0
[ 1008.297726][ T7716]  ? lockdep_hardirqs_on+0x8d/0x130
[ 1008.302907][ T7716]  ? syscall_enter_from_user_mode+0x2e/0x1c0
[ 1008.308895][ T7716]  do_syscall_64+0x3f/0xb0
[ 1008.313314][ T7716]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1008.319191][ T7716] RIP: 0033:0x4665f9
[ 1008.323198][ T7716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1008.342785][ T7716] RSP: 002b:00007f37865b4108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1008.351181][ T7716] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9
[ 1008.359132][ T7716] RDX: 0000000020ff7000 RSI: 0000000020000000 RDI: 0000000000001149
[ 1008.367081][ T7716] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0
[ 1008.375030][ T7716] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0
[ 1008.383000][ T7716] R13: 0000000020ff7000 R14: 0000000020000080 R15: 0000000020ff0000
[ 1008.391686][ T7716] Kernel Offset: disabled
[ 1008.396126][ T7716] Rebooting in 86400 seconds..