00ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000840), 0x1)

03:37:19 executing program 2:
socket(0x2a, 0x1, 0x6)

03:37:19 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)

03:37:20 executing program 2:
socket(0x0, 0x1, 0x6)

03:37:20 executing program 4:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000003c0))
accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x0, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0)

03:37:20 executing program 5:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x20, 0x0, 0x0)
accept4$phonet_pipe(r0, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
r2 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000840), 0x1)

03:37:20 executing program 1:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x20, 0x0, 0x0)
accept4$phonet_pipe(r0, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
r2 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000840), 0x1)

03:37:20 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:20 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)

03:37:20 executing program 2:
socket(0x0, 0x1, 0x6)

03:37:20 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:20 executing program 1:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x20, 0x0, 0x0)
accept4$phonet_pipe(r0, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
r2 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000840), 0x1)

03:37:20 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, 0x0, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:20 executing program 0:
socket(0x0, 0x1, 0x0)
accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r0 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r1, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:20 executing program 2:
socket(0x0, 0x1, 0x6)

03:37:20 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)

03:37:20 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, 0x0, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:20 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:20 executing program 1:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x0, 0x0, 0x8000)
accept4$phonet_pipe(r0, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
r2 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000840), 0x1)

03:37:21 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)

03:37:21 executing program 2:
socket(0x2a, 0x0, 0x6)

03:37:21 executing program 0:
socket(0x0, 0x1, 0x0)
accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r0 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r1, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:21 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, 0x0, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:21 executing program 2:
socket(0x2a, 0x0, 0x0)

03:37:21 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:21 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

03:37:21 executing program 1:
socket(0x0, 0x1, 0x0)
accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r0 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r1, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:21 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:21 executing program 0:
socket(0x0, 0x1, 0x0)
accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r0 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r1, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:21 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, 0x0, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:21 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:21 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
socket(0x20, 0x5, 0x8000)

03:37:21 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, 0x0, 0x0)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {0x0}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:21 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:21 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:21 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, 0x0, &(0x7f0000000080))
r1 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:21 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, 0x0, 0x20000000)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:21 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)

03:37:22 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:22 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:22 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)

03:37:22 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:22 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, 0x0, 0x20000000)

03:37:22 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

03:37:22 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, 0x0, &(0x7f0000000080))
r1 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:22 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)

03:37:22 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:22 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, 0x0, 0x20000000)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:22 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))

03:37:22 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:22 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})

03:37:22 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, 0x0, &(0x7f0000000080))
r1 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:22 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:22 executing program 3:
socket(0x2a, 0x1, 0x6)

03:37:22 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})

03:37:22 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x0, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:22 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:22 executing program 3:
socket(0x0, 0x1, 0x6)

03:37:22 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), 0x0)
r1 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:22 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:23 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)

03:37:23 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:23 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:23 executing program 3:
socket(0x0, 0x1, 0x6)

03:37:23 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:23 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), 0x0)
r1 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:23 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)

03:37:23 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:23 executing program 1:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x0, 0x0, 0x8000)
accept4$phonet_pipe(r0, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
r2 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000840), 0x1)

03:37:23 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:23 executing program 3:
socket(0x0, 0x1, 0x6)

03:37:23 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), 0x0)
r1 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:23 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:23 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)

03:37:23 executing program 3:
socket(0x2a, 0x0, 0x6)

03:37:23 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:23 executing program 1:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), 0x0)
r1 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:23 executing program 3:
socket(0x2a, 0x0, 0x0)

03:37:24 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)

03:37:24 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:24 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
socket(0x20, 0x0, 0x8000)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:24 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x0, 0x0, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:24 executing program 1:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), 0x0)
r1 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:24 executing program 3:
socket(0x0, 0x1, 0x6)

03:37:24 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

03:37:24 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:24 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:24 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x0, 0x0, 0x6}, 0x10)
socket(0x20, 0x5, 0x8000)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:24 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:24 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:24 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:24 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:24 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:24 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
socket(0x20, 0x5, 0x8000)

03:37:24 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:24 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x0, 0x0, 0x6}, 0x10)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:24 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:24 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:24 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:24 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:24 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:25 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:25 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)

03:37:25 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:25 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:25 executing program 5:
socket(0x2a, 0x1, 0x6)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:25 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:25 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)

03:37:25 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:25 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:25 executing program 5:
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:25 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)

03:37:25 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:25 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:25 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:25 executing program 5:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:25 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)

03:37:25 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:25 executing program 5:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000800))

03:37:25 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:25 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:25 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:25 executing program 2:
socket(0x2a, 0x1, 0x6)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:25 executing program 4:
socket(0x2a, 0x1, 0x6)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)

03:37:25 executing program 1:
socket(0x2a, 0x1, 0x6)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:25 executing program 5:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0)

03:37:25 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:25 executing program 2:
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:25 executing program 3:
socket(0x2a, 0x1, 0x6)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:25 executing program 4:
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)

03:37:25 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:25 executing program 1:
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:25 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:25 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x0)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:25 executing program 3:
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:25 executing program 4:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)

03:37:25 executing program 1:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:25 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000800))

03:37:25 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:25 executing program 3:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:26 executing program 1:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000800))

03:37:26 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, 0x0, 0x0)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:26 executing program 2:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0)

03:37:26 executing program 3:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000800))

03:37:26 executing program 1:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0)

03:37:26 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x0)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:26 executing program 3:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0)

03:37:26 executing program 2:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x20, 0x0, 0x8000)
accept4$phonet_pipe(r0, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
r2 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000840), 0x1)

03:37:26 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0))
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:26 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, 0x0, 0x0)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0))
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:26 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:26 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:26 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x0)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:26 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:26 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0))
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:26 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:26 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:26 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, 0x0, 0x0)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:26 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r1, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:26 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {0x0}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:26 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:27 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {0x0}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:27 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:27 executing program 1:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000003c0))
accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x0, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0)

03:37:27 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r1, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:27 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:27 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:27 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
r0 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000080))
getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x20, 0x0, 0x8000)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:27 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}], 0x1)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:27 executing program 1:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
r0 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000080))
getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x20, 0x0, 0x8000)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:27 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380), 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:27 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:27 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r1, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:27 executing program 4:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r1, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:27 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}], 0x1)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:27 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}], 0x1)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:27 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380), 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:28 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:28 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:28 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, &(0x7f0000000200))
r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:28 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}], 0x1)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:28 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380), 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:28 executing program 2:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x0, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0)

03:37:28 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:28 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:28 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}], 0x1)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:28 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:28 executing program 2:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x0, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0)

03:37:28 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:28 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:28 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}], 0x1)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))

03:37:28 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:29 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0))
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:29 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, 0x0, 0x0)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:29 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:29 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:29 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}], 0x1)

03:37:29 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x20, 0x0, 0x8000)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:29 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:29 executing program 2:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:29 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:29 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x20, 0x0, 0x8000)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:29 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x20, 0x0, 0x8000)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:29 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})

03:37:29 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:29 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:29 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:29 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, 0x0, 0x0)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:29 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)

03:37:29 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x20, 0x0, 0x8000)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:30 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:30 executing program 1:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:30 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)

03:37:30 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:30 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x20, 0x0, 0x8000)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:30 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x20, 0x0, 0x8000)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:30 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:30 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x20, 0x0, 0x8000)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:30 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)

03:37:30 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, 0x0, &(0x7f0000000340))
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:30 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:30 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x20, 0x0, 0x8000)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:30 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:30 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:30 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)

03:37:30 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:30 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x20, 0x0, 0x8000)
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:31 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x20, 0x0, 0x8000)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:31 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x20, 0x0, 0x8000)
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:31 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
socket(0x20, 0x0, 0x8000)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)

03:37:31 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:31 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:31 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, 0x0, &(0x7f0000000280), 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:31 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
socket(0x20, 0x0, 0x8000)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
r2 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000840), 0x1)

03:37:31 executing program 3:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000003c0))
accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x0, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000800))

03:37:31 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)

03:37:31 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, 0x0, 0x0)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:31 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, 0x0, 0x0)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:31 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)

03:37:31 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:31 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
socket(0x20, 0x0, 0x8000)
r1 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000840), 0x1)

03:37:31 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)

03:37:31 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, 0x0, &(0x7f0000000280), 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:31 executing program 3:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000003c0))
accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:31 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)

03:37:32 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, 0x0, 0x0)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:32 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:32 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
socket(0x20, 0x0, 0x8000)
r1 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000840), 0x1)

03:37:32 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)

03:37:32 executing program 1:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:32 executing program 5:
socket(0x2a, 0x1, 0x6)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)

03:37:32 executing program 3:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000003c0))
accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:32 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, 0x0, 0x0)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:32 executing program 5:
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)

03:37:32 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000840), 0x1)

03:37:32 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
accept4$phonet_pipe(r2, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:32 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
socket(0x20, 0x0, 0x8000)
r1 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000840), 0x1)

03:37:32 executing program 5:
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)

03:37:32 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000840), 0x1)

03:37:32 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:32 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:32 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:32 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000840), 0x1)

03:37:32 executing program 1:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000003c0))
accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x0, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:32 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:32 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
socket(0x20, 0x0, 0x8000)
r1 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000840), 0x1)

03:37:32 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:33 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:33 executing program 5:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000003c0))
accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:33 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
socket(0x20, 0x0, 0x8000)
r1 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000840), 0x1)

03:37:33 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, 0x0, 0x0)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:33 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:33 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, 0x0, 0x0)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:33 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:33 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:33 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
socket(0x20, 0x0, 0x8000)
r1 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000840), 0x1)

03:37:33 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:33 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:33 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, &(0x7f0000000200))
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:33 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, &(0x7f0000000200))
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:33 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, 0x0, &(0x7f0000000280), 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:33 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, 0x0, &(0x7f0000000280), 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:34 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
socket(0x20, 0x0, 0x8000)
r1 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000840), 0x1)

03:37:34 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:34 executing program 2:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:34 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, &(0x7f0000000200))
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:34 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:34 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:34 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
socket(0x20, 0x0, 0x8000)
r1 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000840), 0x1)

03:37:34 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:34 executing program 2:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:34 executing program 5:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000003c0))
accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:34 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:34 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:34 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
socket(0x20, 0x0, 0x8000)
r1 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000840), 0x1)

03:37:34 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:34 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:35 executing program 5:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000003c0))
accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:35 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, 0x0, 0x0)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:35 executing program 3:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000003c0))
accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:35 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
socket(0x20, 0x0, 0x8000)
r1 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000840), 0x1)

03:37:35 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:35 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x0)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:35 executing program 5:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000003c0))
accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:35 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:35 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
socket(0x20, 0x0, 0x8000)
r1 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000840), 0x1)

03:37:35 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x0)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:35 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:35 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, &(0x7f0000000200))
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:35 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x0, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:35 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
socket(0x20, 0x0, 0x8000)
r1 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000840), 0x1)

03:37:35 executing program 5:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000003c0))
syz_io_uring_setup(0x0, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:35 executing program 3:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:36 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:36 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:36 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
socket(0x20, 0x0, 0x8000)
r1 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000840), 0x1)

03:37:36 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x0, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:36 executing program 5:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:36 executing program 3:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:36 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:36 executing program 2:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:36 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:36 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800)
socket(0x20, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:36 executing program 5:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:36 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180), 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:36 executing program 1:
socket(0x20, 0x0, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0)

03:37:36 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x0, 0x0)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:36 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800)
socket(0x20, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:37 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:37 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:37 executing program 5:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:37 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x0, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:37 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:37 executing program 3:
socket(0x20, 0x0, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000800))

03:37:37 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800)
socket(0x20, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:37 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:37 executing program 5:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:37 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x0, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:37 executing program 1:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x0, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:37 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, &(0x7f0000000100))
accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800)
socket(0x20, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:37 executing program 3:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800)
socket(0x20, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:37 executing program 5:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
syz_io_uring_setup(0x0, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:38 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:38 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:38 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x0, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:38 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800)
socket(0x20, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:38 executing program 5:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:38 executing program 3:
socket(0x20, 0x0, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:38 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:38 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:38 executing program 1:
socket(0x20, 0x0, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x0, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:38 executing program 5:
socket(0x0, 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:38 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x800)
socket(0x20, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:38 executing program 3:
socket(0x20, 0x0, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:39 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:39 executing program 2:
socket(0x20, 0x0, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x0, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:39 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:39 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:39 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x800)
socket(0x20, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:39 executing program 5:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:39 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:39 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:39 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:39 executing program 5:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:39 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x20, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:39 executing program 5:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:39 executing program 1:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x800)
socket(0x20, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:39 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:40 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:40 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000800))

03:37:40 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:40 executing program 1:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x800)
socket(0x20, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:40 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:40 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x20, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:40 executing program 3:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x20, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:40 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:40 executing program 1:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
r1 = accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x0, 0x0, 0x0)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:40 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000800))

03:37:40 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000800))

03:37:40 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:40 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x20, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:40 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:40 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000800))

03:37:41 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000800))

03:37:41 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:41 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:41 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:41 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000800))

03:37:41 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0)

03:37:41 executing program 3:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x20, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:41 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0)

03:37:41 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:41 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:41 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:41 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0)

03:37:41 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0)

03:37:42 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000800))

03:37:42 executing program 2:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
r1 = accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x0, 0x0, 0x8000)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:42 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:42 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:42 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:42 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0)

03:37:42 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:42 executing program 2:
socket(0x20, 0x0, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:42 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:42 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:42 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x0)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:43 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0)

03:37:43 executing program 3:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
r1 = accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x0, 0x5, 0x8000)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:43 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, 0x0, 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:43 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:43 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, &(0x7f0000000100))
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:43 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:43 executing program 0:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0)

03:37:43 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, &(0x7f0000000100))
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:43 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:43 executing program 5:
socket(0x20, 0x0, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:43 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, &(0x7f0000000100))
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:43 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:43 executing program 0:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
r1 = accept4$phonet_pipe(r0, 0x0, 0x0, 0x0)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:43 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, &(0x7f0000000100))
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:43 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r3 = accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r3, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:43 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r3 = accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r3, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:43 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:44 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:44 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:44 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:44 executing program 2:
socket(0x20, 0x0, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:44 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, &(0x7f0000000100))
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:44 executing program 5:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
r1 = accept4$phonet_pipe(r0, 0x0, 0x0, 0x0)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:44 executing program 1:
socket(0x20, 0x0, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:44 executing program 0:
socket(0x20, 0x0, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, &(0x7f0000000200))
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:44 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:44 executing program 2:
socket(0x20, 0x0, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:44 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:44 executing program 3:
socket(0x20, 0x0, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:44 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:44 executing program 0:
r0 = socket(0x20, 0x0, 0x0)
getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:44 executing program 2:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
r1 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:44 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, 0x0, &(0x7f0000000080))
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:44 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:45 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, &(0x7f0000000100))
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:45 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:45 executing program 0:
r0 = socket(0x20, 0x0, 0x0)
getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:45 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:45 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), 0x0)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:45 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:45 executing program 2:
r0 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:45 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, 0x0, &(0x7f0000000080))
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:45 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:45 executing program 1:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:45 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:45 executing program 2:
r0 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:45 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:45 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:45 executing program 0:
r0 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:46 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:46 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:46 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), 0x0)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:46 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:46 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, 0x0, &(0x7f0000000080))
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:46 executing program 0:
r0 = socket(0x20, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:46 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000))
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:46 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, 0x0, &(0x7f0000000080))
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:46 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:46 executing program 3:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:46 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, 0x0, &(0x7f0000000080))
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:46 executing program 0:
r0 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:46 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:46 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:46 executing program 2:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:46 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, 0x0, &(0x7f0000000080))
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:46 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000))
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:46 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, 0x0, &(0x7f0000000080))
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:47 executing program 1:
r0 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:47 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:47 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:47 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000))
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:47 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, 0x0, &(0x7f0000000080))
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:47 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:47 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0)
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:47 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:47 executing program 3:
r0 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:47 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:47 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000))
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:47 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:47 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:47 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:47 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:47 executing program 5:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r0, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r1 = socket(0x20, 0x5, 0x8000)
accept4$phonet_pipe(r0, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:47 executing program 3:
r0 = socket(0x2a, 0x1, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:48 executing program 1:
r0 = socket(0x2a, 0x1, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:48 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:48 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:48 executing program 2:
r0 = socket(0x2a, 0x0, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:48 executing program 5:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r0, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r1 = socket(0x20, 0x5, 0x8000)
accept4$phonet_pipe(r0, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:48 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:48 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:48 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
socket(0x20, 0x5, 0x8000)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:48 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:48 executing program 2:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:48 executing program 5:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r0, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r1 = socket(0x20, 0x5, 0x8000)
accept4$phonet_pipe(r0, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:48 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:48 executing program 3:
r0 = socket(0x0, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:48 executing program 0:
r0 = socket(0x2a, 0x0, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:48 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:48 executing program 2:
r0 = socket(0x2a, 0x0, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:48 executing program 5:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r3 = accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r3, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:49 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:49 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:49 executing program 3:
r0 = socket(0x0, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:49 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:49 executing program 2:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:49 executing program 5:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:49 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:49 executing program 0:
r0 = socket(0x0, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:49 executing program 3:
r0 = socket(0x0, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:49 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:49 executing program 2:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:49 executing program 5:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:49 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
r3 = socket(0x20, 0x5, 0x8000)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:50 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:50 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000840), 0x1)

03:37:50 executing program 3:
r0 = socket(0x0, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:50 executing program 5:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:50 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:50 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:50 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:50 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000840), 0x1)

03:37:50 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:50 executing program 5:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:50 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:50 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:50 executing program 0:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:50 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000840), 0x1)

03:37:50 executing program 2:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000840), 0x1)

03:37:50 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:50 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r3 = accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r3, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:50 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:51 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1)

03:37:51 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:51 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:51 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:51 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:51 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:51 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1)

03:37:51 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:51 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:51 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:51 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:51 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1)

03:37:51 executing program 3:
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1)

03:37:51 executing program 0:
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1)

03:37:51 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:51 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:51 executing program 5:
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1)

03:37:51 executing program 0:
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1)

03:37:51 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r1, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:52 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1)

03:37:52 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:52 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r3 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r3, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:52 executing program 1:
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1)

03:37:52 executing program 3:
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1)

03:37:52 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:52 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r3 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r3, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:52 executing program 3:
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1)

03:37:52 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:52 executing program 1:
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1)

03:37:52 executing program 5:
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1)

03:37:52 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:52 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:52 executing program 1:
r0 = syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1)

03:37:52 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r2 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:52 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:52 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:52 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:52 executing program 2:
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:52 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:52 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:52 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:52 executing program 2:
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:52 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:52 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:53 executing program 5:
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:53 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:53 executing program 2:
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:53 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:53 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:53 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:53 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:53 executing program 2:
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1)

03:37:53 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:53 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:53 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:53 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:53 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:53 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:53 executing program 0:
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1)

03:37:53 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:53 executing program 1:
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000840), 0x1)

03:37:53 executing program 0:
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:53 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:53 executing program 2:
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:53 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:53 executing program 1:
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:53 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:53 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:53 executing program 5:
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:53 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:54 executing program 0:
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:54 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:54 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:54 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:54 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:54 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:54 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:54 executing program 3:
r0 = syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:54 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:54 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:54 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:54 executing program 3:
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:54 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:54 executing program 4:
r0 = syz_io_uring_setup(0x26e3, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:54 executing program 3:
socket(0x2a, 0x1, 0x6)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:54 executing program 5:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:54 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000840), 0x1)

03:37:54 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:54 executing program 5:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:54 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:54 executing program 3:
socket(0x2a, 0x1, 0x6)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:54 executing program 0:
socket(0x2a, 0x1, 0x6)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:54 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:55 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000840), 0x1)

03:37:55 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:55 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:55 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000840), 0x1)

03:37:55 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:55 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:55 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:55 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:55 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:55 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:55 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
socket(0x20, 0x5, 0x8000)
r3 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840), 0x1)

03:37:55 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:55 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:55 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:55 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:55 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:55 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:55 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:55 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:55 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:55 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:55 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:56 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:56 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:56 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:56 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:56 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:56 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:56 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:56 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:56 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:56 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:56 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:56 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:56 executing program 1:
socketpair(0x1e, 0x2, 0x0, &(0x7f00000001c0))
ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, 0x0)

03:37:56 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:56 executing program 3:
socketpair(0x1e, 0x2, 0x0, 0x0)
ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, 0x0)

03:37:56 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:56 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:56 executing program 4:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:56 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
r4 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000840), 0x1)

03:37:57 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000300), 0x2)

03:37:57 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000300), 0x2)

03:37:57 executing program 3:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
r5 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000840), 0x1)

03:37:57 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
r5 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000840), 0x1)

03:37:57 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
r5 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000840), 0x1)

03:37:57 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
r5 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000840), 0x1)

03:37:57 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
r5 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000840), 0x1)

03:37:57 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 1)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

[  310.187913][T21818] FAULT_INJECTION: forcing a failure.
[  310.187913][T21818] name fail_usercopy, interval 1, probability 0, space 0, times 1
03:37:57 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 1)

[  310.187947][T21818] CPU: 0 PID: 21818 Comm: syz-executor.4 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0
03:37:57 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
r5 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000840), 0x1)

[  310.187971][T21818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
03:37:57 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
r5 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000840), 0x1)

03:37:57 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 2)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

[  310.187985][T21818] Call Trace:
03:37:57 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
r5 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000840), 0x1)

03:37:57 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
r5 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000840), 0x1)

[  310.187991][T21818]  <TASK>
[  310.187998][T21818]  dump_stack_lvl+0xcd/0x134
[  310.188225][T21818]  should_fail.cold+0x5/0xa
[  310.188254][T21818]  _copy_from_user+0x2a/0x170
[  310.188386][T21818]  io_uring_setup+0x86/0x150
[  310.188496][T21818]  ? __context_tracking_exit+0xb8/0xe0
03:37:57 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 2)

[  310.188578][T21818]  ? lock_downgrade+0x6e0/0x6e0
03:37:57 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 3)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:57 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
r5 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000840), 0x1)

[  310.188653][T21818]  ? io_sqe_buffers_register+0x1b0/0x1b0
[  310.188697][T21818]  ? lock_downgrade+0x6e0/0x6e0
[  310.188748][T21818]  ? syscall_enter_from_user_mode+0x21/0x70
[  310.188825][T21818]  do_syscall_64+0x35/0xb0
03:37:58 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
r5 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000840), 0x1)

03:37:58 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
r5 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000840), 0x1)

[  310.188857][T21818]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
03:37:58 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
r5 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000840), 0x1)

[  310.188908][T21818] RIP: 0033:0x7f624ee890e9
[  310.188928][T21818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  310.188952][T21818] RSP: 002b:00007f62500870e8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
03:37:58 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 3)

[  310.188975][T21818] RAX: ffffffffffffffda RBX: 00007f624ef9c030 RCX: 00007f624ee890e9
03:37:58 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 4)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:58 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:37:58 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

[  310.188991][T21818] RDX: 0000000020ffb000 RSI: 0000000020000740 RDI: 00000000000026e3
03:37:58 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

[  310.189006][T21818] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800
03:37:58 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

[  310.189021][T21818] R10: 00000000200007c0 R11: 0000000000000206 R12: 0000000020000800
[  310.189036][T21818] R13: 0000000020ffb000 R14: 00000000200007c0 R15: 0000000020ff9000
[  310.189066][T21818]  </TASK>
[  310.435275][T21831] FAULT_INJECTION: forcing a failure.
[  310.435275][T21831] name fail_usercopy, interval 1, probability 0, space 0, times 0
03:37:58 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 4)

[  310.435389][T21831] CPU: 1 PID: 21831 Comm: syz-executor.3 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0
03:37:58 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)

03:37:58 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 5)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:58 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)

[  310.435416][T21831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
03:37:58 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)

[  310.435430][T21831] Call Trace:
03:37:58 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)

[  310.435435][T21831]  <TASK>
[  310.435444][T21831]  dump_stack_lvl+0xcd/0x134
[  310.435482][T21831]  should_fail.cold+0x5/0xa
[  310.435513][T21831]  _copy_from_user+0x2a/0x170
[  310.435556][T21831]  io_uring_setup+0x86/0x150
[  310.435593][T21831]  ? __context_tracking_exit+0xb8/0xe0
[  310.435619][T21831]  ? lock_downgrade+0x6e0/0x6e0
03:37:58 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)

03:37:59 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 5)

03:37:59 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 6)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:59 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)

[  310.435658][T21831]  ? io_sqe_buffers_register+0x1b0/0x1b0
[  310.435696][T21831]  ? lock_downgrade+0x6e0/0x6e0
03:37:59 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)

[  310.435748][T21831]  ? syscall_enter_from_user_mode+0x21/0x70
[  310.435794][T21831]  do_syscall_64+0x35/0xb0
03:37:59 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)

[  310.435824][T21831]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
[  310.435850][T21831] RIP: 0033:0x7f877a8890e9
[  310.435869][T21831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
03:37:59 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)

[  310.435892][T21831] RSP: 002b:00007f877ba930e8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
03:37:59 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)

03:37:59 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 6)

03:37:59 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 7)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

[  310.435916][T21831] RAX: ffffffffffffffda RBX: 00007f877a99c100 RCX: 00007f877a8890e9
[  310.435932][T21831] RDX: 0000000020ffb000 RSI: 0000000020000740 RDI: 00000000000026e3
03:37:59 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)

[  310.435947][T21831] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800
03:37:59 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)

[  310.435961][T21831] R10: 00000000200007c0 R11: 0000000000000206 R12: 0000000020000800
[  310.435975][T21831] R13: 0000000020ffb000 R14: 00000000200007c0 R15: 0000000020ff9000
[  310.436005][T21831]  </TASK>
03:37:59 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)

03:37:59 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))

03:37:59 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 8)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:37:59 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 7)

03:37:59 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))

03:37:59 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))

03:38:00 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)

03:38:00 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)

03:38:00 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 9)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:00 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)

03:38:00 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)

03:38:00 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 8)

03:38:00 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)

03:38:00 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})

03:38:00 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 10)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:00 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)

03:38:00 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)

03:38:00 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})

[  313.346061][T22039] FAULT_INJECTION: forcing a failure.
[  313.346061][T22039] name fail_usercopy, interval 1, probability 0, space 0, times 0
03:38:00 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 9)

[  313.346095][T22039] CPU: 1 PID: 22039 Comm: syz-executor.4 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0
03:38:00 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 11)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

[  313.346122][T22039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
03:38:00 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)

[  313.346137][T22039] Call Trace:
[  313.346143][T22039]  <TASK>
[  313.346151][T22039]  dump_stack_lvl+0xcd/0x134
03:38:00 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)

[  313.346192][T22039]  should_fail.cold+0x5/0xa
[  313.346224][T22039]  _copy_to_user+0x2a/0x140
03:38:00 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)

03:38:00 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)

[  313.346291][T22039]  io_uring_setup.cold+0x18da/0x2802
03:38:00 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 10)

[  313.346370][T22039]  ? io_sqe_buffers_register+0x1b0/0x1b0
[  313.346429][T22039]  ? syscall_enter_from_user_mode+0x21/0x70
[  313.346478][T22039]  do_syscall_64+0x35/0xb0
[  313.346508][T22039]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
03:38:01 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)

[  313.346535][T22039] RIP: 0033:0x7f624ee890e9
03:38:01 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 12)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

[  313.346555][T22039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
03:38:01 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)

03:38:01 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)

[  313.346578][T22039] RSP: 002b:00007f62500870e8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  313.346601][T22039] RAX: ffffffffffffffda RBX: 00007f624ef9c030 RCX: 00007f624ee890e9
03:38:01 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)

[  313.346616][T22039] RDX: 0000000020ffb000 RSI: 0000000020000740 RDI: 00000000000026e3
03:38:01 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 13)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:01 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 11)

[  313.346630][T22039] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800
03:38:01 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)

[  313.346644][T22039] R10: 00000000200007c0 R11: 0000000000000206 R12: 0000000020000800
[  313.346659][T22039] R13: 0000000020ffb000 R14: 00000000200007c0 R15: 0000000020ff9000
03:38:01 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)

[  313.346691][T22039]  </TASK>
[  313.651033][T22064] socket: no more sockets
03:38:01 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)

[  313.983263][T22089] FAULT_INJECTION: forcing a failure.
[  313.983263][T22089] name fail_usercopy, interval 1, probability 0, space 0, times 0
03:38:01 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)

[  313.983297][T22089] CPU: 1 PID: 22089 Comm: syz-executor.3 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0
03:38:01 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)

03:38:01 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 14)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

[  313.983324][T22089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
03:38:01 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 12)

[  313.983338][T22089] Call Trace:
[  313.983344][T22089]  <TASK>
[  313.983352][T22089]  dump_stack_lvl+0xcd/0x134
[  313.983392][T22089]  should_fail.cold+0x5/0xa
03:38:01 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)

[  313.983424][T22089]  _copy_to_user+0x2a/0x140
03:38:02 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)

[  313.983470][T22089]  io_uring_setup.cold+0x18da/0x2802
[  313.983506][T22089]  ? io_sqe_buffers_register+0x1b0/0x1b0
03:38:02 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)

[  313.983566][T22089]  ? syscall_enter_from_user_mode+0x21/0x70
[  313.983613][T22089]  do_syscall_64+0x35/0xb0
03:38:02 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

[  313.983646][T22089]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
03:38:02 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 15)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

[  313.983675][T22089] RIP: 0033:0x7f877a8890e9
03:38:02 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 13)

[  313.983694][T22089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
03:38:02 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
socket(0x20, 0x5, 0x8000)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)

03:38:02 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

[  313.983717][T22089] RSP: 002b:00007f877ba930e8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
03:38:02 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)

[  313.983739][T22089] RAX: ffffffffffffffda RBX: 00007f877a99c100 RCX: 00007f877a8890e9
[  313.983754][T22089] RDX: 0000000020ffb000 RSI: 0000000020000740 RDI: 00000000000026e3
03:38:02 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 16)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

[  313.983768][T22089] RBP: 0000000020000740 R08: 0000000020000800 R09: 0000000020000800
03:38:02 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
socket(0x20, 0x5, 0x8000)

[  313.983782][T22089] R10: 00000000200007c0 R11: 0000000000000206 R12: 0000000020000800
03:38:02 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 14)

03:38:02 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)

03:38:02 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)

[  313.983797][T22089] R13: 0000000020ffb000 R14: 00000000200007c0 R15: 0000000020ff9000
03:38:02 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
socket(0x20, 0x5, 0x8000)

[  313.983830][T22089]  </TASK>
[  313.998955][T22090] socket: no more sockets
[  314.395509][T22117] socket: no more sockets
03:38:02 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)

[  314.794676][T22143] socket: no more sockets
03:38:02 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)

03:38:02 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 17)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:02 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)

03:38:02 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)

03:38:02 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)

03:38:02 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 15)

03:38:03 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)

03:38:03 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)

03:38:03 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)

03:38:03 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)

03:38:03 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)

03:38:03 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 18)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:03 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)

03:38:03 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)

03:38:03 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)

03:38:03 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 16)

03:38:03 executing program 2:
socket(0x2a, 0x1, 0x6)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)

03:38:03 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)

03:38:03 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)

03:38:03 executing program 0:
socket(0x2a, 0x1, 0x6)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)

03:38:03 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 19)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:03 executing program 2:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)

03:38:03 executing program 5:
socket(0x2a, 0x1, 0x6)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)

03:38:03 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)

03:38:03 executing program 0:
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)

03:38:03 executing program 2:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x20000000)

03:38:03 executing program 5:
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)

03:38:03 executing program 0:
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:38:03 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 17)

03:38:03 executing program 1:
accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800)

03:38:03 executing program 2:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)

03:38:03 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)

03:38:03 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 20)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:03 executing program 5:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)

03:38:03 executing program 1:
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x800)

03:38:03 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)

03:38:03 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)

03:38:03 executing program 1:
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:38:03 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 18)

03:38:03 executing program 0:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)

03:38:04 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 21)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:04 executing program 1:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)

03:38:04 executing program 2:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

[  316.898719][ T1234] ieee802154 phy0 wpan0: encryption failed: -22
[  316.898770][ T1234] ieee802154 phy1 wpan1: encryption failed: -22
03:38:04 executing program 5:
r0 = socket(0x2a, 0x1, 0x6)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0xffff})
r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x800)
connect$phonet_pipe(r2, &(0x7f0000000180)={0x23, 0x40, 0x7f, 0x6}, 0x10)
r3 = socket(0x20, 0x5, 0x8000)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = accept4$phonet_pipe(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000002c0), 0x4)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000380)=0x42, 0x4)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000003c0)={@any, 0x6ac3913c})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
accept4$phonet_pipe(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x3, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

03:38:04 executing program 0:
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (fail_nth: 1)

03:38:04 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) (fail_nth: 1)

03:38:04 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 22)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:04 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 19)

03:38:04 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)

[  317.203448][T22333] FAULT_INJECTION: forcing a failure.
[  317.203448][T22333] name fail_usercopy, interval 1, probability 0, space 0, times 0
03:38:04 executing program 0:
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:38:04 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0) (fail_nth: 1)

[  317.203480][T22333] CPU: 0 PID: 22333 Comm: syz-executor.1 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0
03:38:04 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x7)

03:38:04 executing program 2:
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) (fail_nth: 1)

[  317.203506][T22333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
03:38:04 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 23)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

[  317.203519][T22333] Call Trace:
[  317.203526][T22333]  <TASK>
[  317.203534][T22333]  dump_stack_lvl+0xcd/0x134
03:38:04 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)

03:38:04 executing program 0:
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x7)

[  317.203573][T22333]  should_fail.cold+0x5/0xa
[  317.203604][T22333]  _copy_to_user+0x2a/0x140
[  317.203647][T22333]  simple_read_from_buffer+0xcc/0x160
[  317.203776][T22333]  proc_fail_nth_read+0x187/0x220
03:38:04 executing program 2:
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  317.203832][T22333]  ? proc_exe_link+0x1d0/0x1d0
03:38:04 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 20)

03:38:04 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x700)

03:38:04 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x7)

03:38:04 executing program 0:
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x700)

[  317.203872][T22333]  ? security_file_permission+0xab/0xd0
[  317.204014][T22333]  ? proc_exe_link+0x1d0/0x1d0
[  317.204053][T22333]  vfs_read+0x1ef/0x5d0
[  317.204132][T22333]  ksys_read+0x127/0x250
03:38:04 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x7000000)

[  317.204169][T22333]  ? vfs_write+0xac0/0xac0
[  317.204205][T22333]  ? syscall_enter_from_user_mode+0x21/0x70
03:38:04 executing program 2:
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
socket$bt_hidp(0x1f, 0x3, 0x6)

03:38:04 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x700)

[  317.204252][T22333]  do_syscall_64+0x35/0xb0
03:38:04 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 24)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

[  317.204284][T22333]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
03:38:05 executing program 0:
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x7000000)

[  317.204312][T22333] RIP: 0033:0x7f070523bc9c
[  317.204332][T22333] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
03:38:05 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x700000000000000)

03:38:05 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x7000000)

03:38:05 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 21)

03:38:05 executing program 2:
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1) (async, rerun: 64)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) (async, rerun: 64)
socket$bt_hidp(0x1f, 0x3, 0x6)

03:38:05 executing program 0:
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x700000000000000)

[  317.204356][T22333] RSP: 002b:00007f07063de160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
03:38:05 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x32)
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x42882)
connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x80, 0x2, 0x8f}, 0x10)

03:38:05 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x700000000000000)

[  317.204380][T22333] RAX: ffffffffffffffda RBX: 00007f070539bf60 RCX: 00007f070523bc9c
03:38:05 executing program 0:
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x80400)

[  317.204395][T22333] RDX: 000000000000000f RSI: 00007f07063de1e0 RDI: 0000000000000003
03:38:05 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 25)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:05 executing program 2:
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1) (async)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) (async)
socket$bt_hidp(0x1f, 0x3, 0x6)

03:38:05 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x32) (async, rerun: 32)
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x42882) (rerun: 32)
connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x80, 0x2, 0x8f}, 0x10)

[  317.204410][T22333] RBP: 00007f07063de1d0 R08: 0000000000000000 R09: 0000000000000000
03:38:05 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000080d}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002cbd0200fbdbdf250400ae008500d03149afff7f7ce8f3b7811f9ba708006734bf6c52cbdbe631c7e39f1900e0000001c36616000000008000000000fb26bc03bf21d0b197cf305ca37d6ee4b490f5fe"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x14)

03:38:05 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 22)

03:38:05 executing program 0:
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x80400)

[  317.204423][T22333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  317.204436][T22333] R13: 00007ffe51fafdef R14: 00007f07063de300 R15: 0000000000022000
[  317.204471][T22333]  </TASK>
[  317.218018][T22334] FAULT_INJECTION: forcing a failure.
03:38:05 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000f80)={'vcan0\x00'}) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000080d}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002cbd0200fbdbdf250400ae008500d03149afff7f7ce8f3b7811f9ba708006734bf6c52cbdbe631c7e39f1900e0000001c36616000000008000000000fb26bc03bf21d0b197cf305ca37d6ee4b490f5fe"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x14)

03:38:05 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x32) (async)
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x42882)
connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x80, 0x2, 0x8f}, 0x10)

03:38:05 executing program 2:
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)
r1 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000840), 0x1)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x8010, r1, 0x10000000)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

[  317.218018][T22334] name fail_usercopy, interval 1, probability 0, space 0, times 0
03:38:05 executing program 0:
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x80400)

[  317.218049][T22334] CPU: 0 PID: 22334 Comm: syz-executor.0 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0
[  317.218074][T22334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
03:38:05 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 26)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:05 executing program 1:
r0 = gettid()
ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x9, 0x0, 0x4}, &(0x7f0000000040)=[{}, {}, {}, {}])
r1 = syz_open_dev$mouse(&(0x7f0000000240), 0xe5ac, 0x40000)
connect$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0x4, @any, 0x8000, 0x2}, 0xe)

[  317.218087][T22334] Call Trace:
[  317.218092][T22334]  <TASK>
[  317.218100][T22334]  dump_stack_lvl+0xcd/0x134
03:38:05 executing program 0:
r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4b, 0x38}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x2004c001}, 0x8000)

[  317.218136][T22334]  should_fail.cold+0x5/0xa
03:38:05 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000080d}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002cbd0200fbdbdf250400ae008500d03149afff7f7ce8f3b7811f9ba708006734bf6c52cbdbe631c7e39f1900e0000001c36616000000008000000000fb26bc03bf21d0b197cf305ca37d6ee4b490f5fe"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x14)

03:38:05 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 23)

[  317.218164][T22334]  _copy_to_user+0x2a/0x140
[  317.218205][T22334]  simple_read_from_buffer+0xcc/0x160
03:38:05 executing program 2:
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1) (async, rerun: 32)
r1 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (rerun: 32)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000840), 0x1)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x8010, r1, 0x10000000)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

[  317.218249][T22334]  proc_fail_nth_read+0x187/0x220
[  317.218287][T22334]  ? proc_exe_link+0x1d0/0x1d0
03:38:05 executing program 1:
r0 = gettid()
ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x9, 0x0, 0x4}, &(0x7f0000000040)=[{}, {}, {}, {}]) (async)
r1 = syz_open_dev$mouse(&(0x7f0000000240), 0xe5ac, 0x40000)
connect$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0x4, @any, 0x8000, 0x2}, 0xe)

03:38:05 executing program 0:
r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4) (async, rerun: 32)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4b, 0x38}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x2004c001}, 0x8000) (rerun: 32)

03:38:05 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000240), 0x5, 0x111040)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x148, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe3e19ea28dbce928}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000804)
r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0x86241)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r5, @ANYBLOB="00012bbd7000fddbdf257b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990005000000320000001400fe00ebbf1eda4b707b69b640a13b2d53a8a10a00060008021100000100001400fe00034b07b52b77f6f0be53c6010ff296cf0a000600ffffffffffff00001400020175cf9c14fa5b6de9daf60ddc585af9a10a00060008021100000000001400fe00359339035840e60f71fe1b4515bfa6921400fe002d7d0274a199811282c73f0182016c0b1400fe006f973a13a55154c4f70169cdf9654e451400fe00a54407e61afc058eb7a81469fb416a5b"], 0xd8}, 0x1, 0x0, 0x0, 0x45}, 0x8000)

[  317.218322][T22334]  ? security_file_permission+0xab/0xd0
[  317.218366][T22334]  ? proc_exe_link+0x1d0/0x1d0
[  317.218401][T22334]  vfs_read+0x1ef/0x5d0
[  317.218441][T22334]  ksys_read+0x127/0x250
03:38:05 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 27)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

[  317.218475][T22334]  ? vfs_write+0xac0/0xac0
03:38:06 executing program 0:
r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4b, 0x38}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x2004c001}, 0x8000)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4) (async)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4b, 0x38}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x2004c001}, 0x8000) (async)

03:38:06 executing program 1:
r0 = gettid()
ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x9, 0x0, 0x4}, &(0x7f0000000040)=[{}, {}, {}, {}])
r1 = syz_open_dev$mouse(&(0x7f0000000240), 0xe5ac, 0x40000)
connect$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0x4, @any, 0x8000, 0x2}, 0xe)
gettid() (async)
ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x9, 0x0, 0x4}, &(0x7f0000000040)=[{}, {}, {}, {}]) (async)
syz_open_dev$mouse(&(0x7f0000000240), 0xe5ac, 0x40000) (async)
connect$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0x4, @any, 0x8000, 0x2}, 0xe) (async)

[  317.218511][T22334]  ? syscall_enter_from_user_mode+0x21/0x70
[  317.218558][T22334]  do_syscall_64+0x35/0xb0
[  317.218588][T22334]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
[  317.218615][T22334] RIP: 0033:0x7fb7acc3bc9c
03:38:06 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000240), 0x5, 0x111040)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x148, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe3e19ea28dbce928}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000804)
r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0x86241)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r5, @ANYBLOB="00012bbd7000fddbdf257b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990005000000320000001400fe00ebbf1eda4b707b69b640a13b2d53a8a10a00060008021100000100001400fe00034b07b52b77f6f0be53c6010ff296cf0a000600ffffffffffff00001400020175cf9c14fa5b6de9daf60ddc585af9a10a00060008021100000000001400fe00359339035840e60f71fe1b4515bfa6921400fe002d7d0274a199811282c73f0182016c0b1400fe006f973a13a55154c4f70169cdf9654e451400fe00a54407e61afc058eb7a81469fb416a5b"], 0xd8}, 0x1, 0x0, 0x0, 0x45}, 0x8000)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0) (async)
syz_open_dev$mouse(&(0x7f0000000240), 0x5, 0x111040) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg0\x00'}) (async)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x148, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe3e19ea28dbce928}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000804) (async)
syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0x86241) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r5, @ANYBLOB="00012bbd7000fddbdf257b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990005000000320000001400fe00ebbf1eda4b707b69b640a13b2d53a8a10a00060008021100000100001400fe00034b07b52b77f6f0be53c6010ff296cf0a000600ffffffffffff00001400020175cf9c14fa5b6de9daf60ddc585af9a10a00060008021100000000001400fe00359339035840e60f71fe1b4515bfa6921400fe002d7d0274a199811282c73f0182016c0b1400fe006f973a13a55154c4f70169cdf9654e451400fe00a54407e61afc058eb7a81469fb416a5b"], 0xd8}, 0x1, 0x0, 0x0, 0x45}, 0x8000) (async)

[  317.218633][T22334] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
03:38:06 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 24)

03:38:06 executing program 0:
r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket(0x2b, 0x1, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000000c0)=0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100))
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x100, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x64}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x20018001}, 0x801)
r5 = accept4$phonet_pipe(r0, &(0x7f0000000300), &(0x7f0000000340)=0x10, 0x81800)
accept4$phonet_pipe(r5, &(0x7f0000000380), &(0x7f00000003c0)=0x10, 0x80000)

03:38:06 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)

03:38:06 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 28)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

[  317.218655][T22334] RSP: 002b:00007fb7ade4f160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  317.218678][T22334] RAX: ffffffffffffffda RBX: 00007fb7acd9bf60 RCX: 00007fb7acc3bc9c
[  317.218693][T22334] RDX: 000000000000000f RSI: 00007fb7ade4f1e0 RDI: 0000000000000003
[  317.218707][T22334] RBP: 00007fb7ade4f1d0 R08: 0000000000000000 R09: 0000000000000000
[  317.218721][T22334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  317.218735][T22334] R13: 00007fffd9a03abf R14: 00007fb7ade4f300 R15: 0000000000022000
[  317.218768][T22334]  </TASK>
[  317.396508][T22346] FAULT_INJECTION: forcing a failure.
[  317.396508][T22346] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  317.396543][T22346] CPU: 0 PID: 22346 Comm: syz-executor.5 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0
[  317.396569][T22346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
03:38:06 executing program 2:
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)
r1 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000840), 0x1) (async, rerun: 64)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x8010, r1, 0x10000000) (async, rerun: 64)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

03:38:06 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000240), 0x5, 0x111040)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg0\x00', <r1=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', <r2=>0x0}) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg0\x00', <r3=>0x0}) (rerun: 64)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x148, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe3e19ea28dbce928}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000804) (async)
r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0x86241)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r5, @ANYBLOB="00012bbd7000fddbdf257b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990005000000320000001400fe00ebbf1eda4b707b69b640a13b2d53a8a10a00060008021100000100001400fe00034b07b52b77f6f0be53c6010ff296cf0a000600ffffffffffff00001400020175cf9c14fa5b6de9daf60ddc585af9a10a00060008021100000000001400fe00359339035840e60f71fe1b4515bfa6921400fe002d7d0274a199811282c73f0182016c0b1400fe006f973a13a55154c4f70169cdf9654e451400fe00a54407e61afc058eb7a81469fb416a5b"], 0xd8}, 0x1, 0x0, 0x0, 0x45}, 0x8000)

03:38:06 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)

03:38:06 executing program 0:
r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket(0x2b, 0x1, 0x0) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000000c0)=0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x100, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x64}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x20018001}, 0x801)
r5 = accept4$phonet_pipe(r0, &(0x7f0000000300), &(0x7f0000000340)=0x10, 0x81800)
accept4$phonet_pipe(r5, &(0x7f0000000380), &(0x7f00000003c0)=0x10, 0x80000)

03:38:06 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 29)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:06 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 25)

[  317.396582][T22346] Call Trace:
[  317.396587][T22346]  <TASK>
03:38:06 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)

[  317.396595][T22346]  dump_stack_lvl+0xcd/0x134
[  317.396633][T22346]  should_fail.cold+0x5/0xa
03:38:06 executing program 0:
r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32)
r1 = socket(0x2b, 0x1, 0x0) (rerun: 32)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000000c0)=0x4) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x100, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x64}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x20018001}, 0x801) (async)
r5 = accept4$phonet_pipe(r0, &(0x7f0000000300), &(0x7f0000000340)=0x10, 0x81800)
accept4$phonet_pipe(r5, &(0x7f0000000380), &(0x7f00000003c0)=0x10, 0x80000)

03:38:06 executing program 5:
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x48850)

03:38:06 executing program 2:
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0x801)
bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x6, [@null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

[  317.396662][T22346]  _copy_to_user+0x2a/0x140
[  317.396708][T22346]  simple_read_from_buffer+0xcc/0x160
[  317.396753][T22346]  proc_fail_nth_read+0x187/0x220
03:38:06 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)

[  317.396818][T22346]  ? proc_exe_link+0x1d0/0x1d0
03:38:06 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 30)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

[  317.396859][T22346]  ? security_file_permission+0xab/0xd0
[  317.396911][T22346]  ? proc_exe_link+0x1d0/0x1d0
03:38:06 executing program 2:
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0x801)
bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x6, [@null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) (async)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

[  317.396948][T22346]  vfs_read+0x1ef/0x5d0
03:38:06 executing program 5:
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x48850)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000f80)={'vcan0\x00'}) (async)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x48850) (async)

03:38:06 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)

03:38:06 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 26)

[  317.396986][T22346]  ksys_read+0x127/0x250
[  317.397021][T22346]  ? vfs_write+0xac0/0xac0
[  317.397059][T22346]  ? syscall_enter_from_user_mode+0x21/0x70
03:38:06 executing program 0:
r0 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x40, 0x189001)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000040)={0x1})
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  317.397110][T22346]  do_syscall_64+0x35/0xb0
[  317.397143][T22346]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
[  317.397171][T22346] RIP: 0033:0x7f59bc43bc9c
03:38:07 executing program 2:
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0x801)
bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x6, [@null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) (async)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

03:38:07 executing program 5:
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000f80)={'vcan0\x00'}) (async, rerun: 64)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x48850) (rerun: 64)

03:38:07 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)

[  317.397191][T22346] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
03:38:07 executing program 0:
r0 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x40, 0x189001)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000040)={0x1}) (async, rerun: 64)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (rerun: 64)

[  317.397214][T22346] RSP: 002b:00007f59bd50e160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
03:38:07 executing program 2:
r0 = syz_io_uring_setup(0x3a82, &(0x7f0000000000)={0x0, 0xbc33, 0x10, 0x2, 0x99}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x4)
r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x5, 0x40)
r2 = syz_io_uring_setup(0x57cd, &(0x7f0000000140)={0x0, 0xe50a, 0x20, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000002c0)=r1, 0x1)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r3, &(0x7f00000003c0)='io.latency\x00', 0x2, 0x0)
r5 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000840), 0x1)
io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0)
openat$cgroup_int(r4, &(0x7f0000000300)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
write$P9_RWSTAT(r3, &(0x7f0000000280)={0x7, 0x7f, 0x2}, 0x7)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/uts\x00')
read$midi(r1, &(0x7f0000000340)=""/61, 0x3d)
r6 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, &(0x7f0000000840), 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)=""/232, 0xe8}], 0x1)

[  317.397237][T22346] RAX: ffffffffffffffda RBX: 00007f59bc59bf60 RCX: 00007f59bc43bc9c
03:38:07 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 31)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:07 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x4004094)
socket$bt_hidp(0x1f, 0x3, 0x6)

03:38:07 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000))

03:38:07 executing program 0:
r0 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x40, 0x189001)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000040)={0x1}) (async)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  317.397253][T22346] RDX: 000000000000000f RSI: 00007f59bd50e1e0 RDI: 0000000000000003
[  317.397267][T22346] RBP: 00007f59bd50e1d0 R08: 0000000000000000 R09: 0000000000000000
03:38:07 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 27)

[  317.397282][T22346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  317.397296][T22346] R13: 00007ffe69d9fc1f R14: 00007f59bd50e300 R15: 0000000000022000
[  317.397330][T22346]  </TASK>
[  317.501662][T22351] FAULT_INJECTION: forcing a failure.
03:38:07 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x4004094) (async)
socket$bt_hidp(0x1f, 0x3, 0x6)

[  317.501662][T22351] name fail_usercopy, interval 1, probability 0, space 0, times 0
03:38:07 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000))
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) (async)
socket$bt_hidp(0x1f, 0x3, 0x6) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async)

03:38:07 executing program 0:
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev, <r0=>0x0}, &(0x7f0000000040)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', r0, 0x117e14780b7dfd77, 0x1f, 0x1f, 0x3, 0x50, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x20, 0x4b, 0xffd}})
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  317.504026][T22351] CPU: 0 PID: 22351 Comm: syz-executor.2 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0
03:38:07 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x4004094)
socket$bt_hidp(0x1f, 0x3, 0x6)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x4004094) (async)
socket$bt_hidp(0x1f, 0x3, 0x6) (async)

[  317.504056][T22351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
03:38:07 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 32)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:07 executing program 2:
r0 = syz_io_uring_setup(0x3a82, &(0x7f0000000000)={0x0, 0xbc33, 0x10, 0x2, 0x99}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x4) (async)
r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x5, 0x40)
r2 = syz_io_uring_setup(0x57cd, &(0x7f0000000140)={0x0, 0xe50a, 0x20, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000002c0)=r1, 0x1)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async)
openat$cgroup_int(r3, &(0x7f00000003c0)='io.latency\x00', 0x2, 0x0) (async)
r5 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000840), 0x1)
io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) (async)
openat$cgroup_int(r4, &(0x7f0000000300)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) (async)
write$P9_RWSTAT(r3, &(0x7f0000000280)={0x7, 0x7f, 0x2}, 0x7) (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/uts\x00')
read$midi(r1, &(0x7f0000000340)=""/61, 0x3d) (async)
r6 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, &(0x7f0000000840), 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)=""/232, 0xe8}], 0x1)

03:38:07 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000))

03:38:07 executing program 0:
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev, <r0=>0x0}, &(0x7f0000000040)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', r0, 0x117e14780b7dfd77, 0x1f, 0x1f, 0x3, 0x50, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x20, 0x4b, 0xffd}})
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, &(0x7f0000000040)=0x14) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', r0, 0x117e14780b7dfd77, 0x1f, 0x1f, 0x3, 0x50, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x20, 0x4b, 0xffd}}) (async)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)

[  317.504070][T22351] Call Trace:
03:38:07 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f80)={'vcan0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg1\x00', <r2=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x230, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x1}, 0x11)
r3 = syz_open_dev$mouse(&(0x7f0000000200), 0x2, 0x200)
ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000240)={r0, 0x4, 0xff, "804e2efcfbfd3874758564136f9a02351d56c1eef047443f282842531dad26c49164cfa99d954fd058d200e29af5f18c3c1eb8caff74dd38eb0e1241cff0b0889084e1f84f21d3a13b1aa0498947b54b773de13468e77747094cadb05b8bea34e208049dce9fea7848716c210058d4ebd6f2f5d8834f4bd920802bd20c3ce339651f8a5ae5bcfacd6cadffb7cd0b10af0248588238880adf9746387e1498750384553baeb1974a79d482130a860826c6f5976ec8fe3c97603f0c9567399d6a4fbc7eada96c35cd8a594edb815bae8a26d1f93b052c3a8bc91b9807a91412"})
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000640)=<r5=>0x0, &(0x7f0000000680)=0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000006c0)={'wg2\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x94, r4, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x8880)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="471de94b75b74bc03d", @ANYBLOB="000129bd7000fedbdf255700000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000)

[  317.504076][T22351]  <TASK>
[  317.504084][T22351]  dump_stack_lvl+0xcd/0x134
[  317.504127][T22351]  should_fail.cold+0x5/0xa
03:38:07 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 28)

[  317.504157][T22351]  _copy_to_user+0x2a/0x140
03:38:07 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0xffffffffffffff7b)

[  317.504204][T22351]  simple_read_from_buffer+0xcc/0x160
[  317.504248][T22351]  proc_fail_nth_read+0x187/0x220
03:38:07 executing program 2:
r0 = syz_io_uring_setup(0x3a82, &(0x7f0000000000)={0x0, 0xbc33, 0x10, 0x2, 0x99}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x4) (async, rerun: 32)
r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x5, 0x40) (rerun: 32)
r2 = syz_io_uring_setup(0x57cd, &(0x7f0000000140)={0x0, 0xe50a, 0x20, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000002c0)=r1, 0x1) (async, rerun: 32)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0) (rerun: 32)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async)
openat$cgroup_int(r3, &(0x7f00000003c0)='io.latency\x00', 0x2, 0x0) (async)
r5 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000840), 0x1) (async)
io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) (async)
openat$cgroup_int(r4, &(0x7f0000000300)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
write$P9_RWSTAT(r3, &(0x7f0000000280)={0x7, 0x7f, 0x2}, 0x7) (async, rerun: 64)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/uts\x00') (rerun: 64)
read$midi(r1, &(0x7f0000000340)=""/61, 0x3d) (async)
r6 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, &(0x7f0000000840), 0x1) (async, rerun: 32)
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)=""/232, 0xe8}], 0x1) (rerun: 32)

[  317.504290][T22351]  ? proc_exe_link+0x1d0/0x1d0
[  317.504328][T22351]  ? security_file_permission+0xab/0xd0
03:38:07 executing program 0:
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev, <r0=>0x0}, &(0x7f0000000040)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', r0, 0x117e14780b7dfd77, 0x1f, 0x1f, 0x3, 0x50, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x20, 0x4b, 0xffd}})
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  317.504372][T22351]  ? proc_exe_link+0x1d0/0x1d0
03:38:07 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 33)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:07 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0xffffffffffffff7b)

[  317.504408][T22351]  vfs_read+0x1ef/0x5d0
03:38:07 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f80)={'vcan0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg1\x00', <r2=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x230, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x1}, 0x11) (async)
r3 = syz_open_dev$mouse(&(0x7f0000000200), 0x2, 0x200)
ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000240)={r0, 0x4, 0xff, "804e2efcfbfd3874758564136f9a02351d56c1eef047443f282842531dad26c49164cfa99d954fd058d200e29af5f18c3c1eb8caff74dd38eb0e1241cff0b0889084e1f84f21d3a13b1aa0498947b54b773de13468e77747094cadb05b8bea34e208049dce9fea7848716c210058d4ebd6f2f5d8834f4bd920802bd20c3ce339651f8a5ae5bcfacd6cadffb7cd0b10af0248588238880adf9746387e1498750384553baeb1974a79d482130a860826c6f5976ec8fe3c97603f0c9567399d6a4fbc7eada96c35cd8a594edb815bae8a26d1f93b052c3a8bc91b9807a91412"})
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000640)=<r5=>0x0, &(0x7f0000000680)=0x4) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000006c0)={'wg2\x00', <r6=>0x0}) (rerun: 64)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x94, r4, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x8880)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="471de94b75b74bc03d", @ANYBLOB="000129bd7000fedbdf255700000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000)

[  317.504446][T22351]  ksys_read+0x127/0x250
[  317.504478][T22351]  ? vfs_write+0xac0/0xac0
[  317.504513][T22351]  ? syscall_enter_from_user_mode+0x21/0x70
[  317.504558][T22351]  do_syscall_64+0x35/0xb0
03:38:07 executing program 0:
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x100000)
socketpair(0x1, 0x0, 0x2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)

03:38:07 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0xffffffffffffff7b)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0xffffffffffffff7b) (async)

[  317.504588][T22351]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
[  317.504615][T22351] RIP: 0033:0x7f8483e3bc9c
03:38:08 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 29)

[  317.504634][T22351] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
03:38:08 executing program 0:
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x100000) (async)
socketpair(0x1, 0x0, 0x2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)

03:38:08 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 34)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:08 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f80)={'vcan0\x00', <r1=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg1\x00', <r2=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x230, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x1}, 0x11) (async)
r3 = syz_open_dev$mouse(&(0x7f0000000200), 0x2, 0x200)
ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000240)={r0, 0x4, 0xff, "804e2efcfbfd3874758564136f9a02351d56c1eef047443f282842531dad26c49164cfa99d954fd058d200e29af5f18c3c1eb8caff74dd38eb0e1241cff0b0889084e1f84f21d3a13b1aa0498947b54b773de13468e77747094cadb05b8bea34e208049dce9fea7848716c210058d4ebd6f2f5d8834f4bd920802bd20c3ce339651f8a5ae5bcfacd6cadffb7cd0b10af0248588238880adf9746387e1498750384553baeb1974a79d482130a860826c6f5976ec8fe3c97603f0c9567399d6a4fbc7eada96c35cd8a594edb815bae8a26d1f93b052c3a8bc91b9807a91412"}) (async, rerun: 64)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r0) (async, rerun: 64)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000640)=<r5=>0x0, &(0x7f0000000680)=0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000006c0)={'wg2\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x94, r4, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x8880) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="471de94b75b74bc03d", @ANYBLOB="000129bd7000fedbdf255700000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000)

[  317.504657][T22351] RSP: 002b:00007f84850c2160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  317.504680][T22351] RAX: ffffffffffffffda RBX: 00007f8483f9bf60 RCX: 00007f8483e3bc9c
03:38:08 executing program 0:
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x100000)
socketpair(0x1, 0x0, 0x2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x100000) (async)
socketpair(0x1, 0x0, 0x2, &(0x7f0000000000)) (async)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) (async)

[  317.504696][T22351] RDX: 000000000000000f RSI: 00007f84850c21e0 RDI: 0000000000000003
[  317.504711][T22351] RBP: 00007f84850c21d0 R08: 0000000000000000 R09: 0000000000000000
03:38:08 executing program 2:
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:38:08 executing program 1:
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x2, 0x8001)
r1 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180))
setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x460, 0x2)
accept$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10)
r3 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180))
setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, 0x0)
connect$phonet_pipe(r3, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={'syztnl1\x00', <r5=>0x0, 0x4, 0x80, 0x2, 0x9, 0x20, @private2, @mcast2, 0xa0, 0x8000, 0x3, 0x1}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000580)={'wg1\x00', <r6=>0x0})
getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000005c0)={@initdev, <r7=>0x0}, &(0x7f0000000600)=0x14)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000640)={@empty, <r8=>0x0}, &(0x7f0000000680)=0x14)
getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000006c0)=<r9=>0x0, &(0x7f0000000700)=0x4)
getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000000740)={@private1, <r10=>0x0}, &(0x7f0000000780)=0x14)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000007c0)={@private2, <r11=>0x0}, &(0x7f0000000800)=0x14)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000840)=<r12=>0x0, &(0x7f0000000880)=0x4)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000008c0)=<r13=>0x0, &(0x7f0000000900)=0x4)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f80)={&(0x7f0000001000)={0x618, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x0, 0x1, @notify_peers_count={{}, {}, {0x0, 0x4, 0x9}}}, {0x0, 0x1, @priority={{{}, {}, {0x0, 0x4, 0x3ff}}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0xfffffffffffffe47}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0xffffffffffffffee, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}, {{0x8, 0x1, r9}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x60}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0xec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @activeport={{}, {}, {0x0, 0x4, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x618}, 0x1, 0x0, 0x0, 0x90}, 0x20000000)
sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00010cbd7000fbdbdf256c00000008002700020000009f00030000000500190104000000040003011c000000080022016e0100000800a00004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x88c5}, 0x800)

03:38:08 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffc, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "372859478198d93865bfa13d039b42fe"}, @NL80211_ATTR_PMK={0x14, 0xfe, "0f2c928b44c62da7a27e0e953844e023"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "6fa0700565ce7d1c39baaeed123d076f"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "f2fd0f06dbab484a6b48902d0d4824d8"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "1f769229863fe080ded72495c323eb1c"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "98438ef12829c4db02aeff1e2c5a4a68"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24044002}, 0x4004)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)

[  317.504725][T22351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
03:38:08 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000900), r0)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001c80)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001c40)={&(0x7f0000001400)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xe000002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x4, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)
r2 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180))
setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, 0x0)
r3 = accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000000)=0x8, 0x4)

03:38:08 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 30)

[  317.504738][T22351] R13: 00007ffca935c44f R14: 00007f84850c2300 R15: 0000000000022000
03:38:08 executing program 1:
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x2, 0x8001)
r1 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180))
setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x460, 0x2)
accept$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10)
r3 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180))
setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, 0x0)
connect$phonet_pipe(r3, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={'syztnl1\x00', <r5=>0x0, 0x4, 0x80, 0x2, 0x9, 0x20, @private2, @mcast2, 0xa0, 0x8000, 0x3, 0x1}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000580)={'wg1\x00', <r6=>0x0})
getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000005c0)={@initdev, <r7=>0x0}, &(0x7f0000000600)=0x14)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000640)={@empty, <r8=>0x0}, &(0x7f0000000680)=0x14)
getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000006c0)=<r9=>0x0, &(0x7f0000000700)=0x4)
getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000000740)={@private1, <r10=>0x0}, &(0x7f0000000780)=0x14)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000007c0)={@private2, <r11=>0x0}, &(0x7f0000000800)=0x14)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000840)=<r12=>0x0, &(0x7f0000000880)=0x4)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000008c0)=<r13=>0x0, &(0x7f0000000900)=0x4)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f80)={&(0x7f0000001000)={0x618, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x0, 0x1, @notify_peers_count={{}, {}, {0x0, 0x4, 0x9}}}, {0x0, 0x1, @priority={{{}, {}, {0x0, 0x4, 0x3ff}}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0xfffffffffffffe47}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0xffffffffffffffee, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}, {{0x8, 0x1, r9}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x60}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0xec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @activeport={{}, {}, {0x0, 0x4, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x618}, 0x1, 0x0, 0x0, 0x90}, 0x20000000)
sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00010cbd7000fbdbdf256c00000008002700020000009f00030000000500190104000000040003011c000000080022016e0100000800a00004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x88c5}, 0x800)
syz_open_dev$mouse(&(0x7f0000000000), 0x2, 0x8001) (async)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180)) (async)
setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) (async)
syz_open_dev$mouse(&(0x7f0000000040), 0x460, 0x2) (async)
accept$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10) (async)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180)) (async)
setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, 0x0) (async)
connect$phonet_pipe(r3, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x9, 0x20, @private2, @mcast2, 0xa0, 0x8000, 0x3, 0x1}}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000580)={'wg1\x00'}) (async)
getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000005c0)={@initdev}, &(0x7f0000000600)=0x14) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000640)={@empty}, &(0x7f0000000680)=0x14) (async)
getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000006c0), &(0x7f0000000700)=0x4) (async)
getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000000740)={@private1}, &(0x7f0000000780)=0x14) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000007c0)={@private2}, &(0x7f0000000800)=0x14) (async)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000840), &(0x7f0000000880)=0x4) (async)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000008c0), &(0x7f0000000900)=0x4) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f80)={&(0x7f0000001000)={0x618, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x0, 0x1, @notify_peers_count={{}, {}, {0x0, 0x4, 0x9}}}, {0x0, 0x1, @priority={{{}, {}, {0x0, 0x4, 0x3ff}}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0xfffffffffffffe47}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0xffffffffffffffee, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}, {{0x8, 0x1, r9}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x60}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0xec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @activeport={{}, {}, {0x0, 0x4, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x618}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) (async)
sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00010cbd7000fbdbdf256c00000008002700020000009f00030000000500190104000000040003011c000000080022016e0100000800a00004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x88c5}, 0x800) (async)

[  317.504771][T22351]  </TASK>
03:38:08 executing program 2:
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)

03:38:08 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 35)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:08 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffc, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "372859478198d93865bfa13d039b42fe"}, @NL80211_ATTR_PMK={0x14, 0xfe, "0f2c928b44c62da7a27e0e953844e023"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "6fa0700565ce7d1c39baaeed123d076f"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "f2fd0f06dbab484a6b48902d0d4824d8"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "1f769229863fe080ded72495c323eb1c"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "98438ef12829c4db02aeff1e2c5a4a68"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24044002}, 0x4004)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f80)={'vcan0\x00'}) (async)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffc, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "372859478198d93865bfa13d039b42fe"}, @NL80211_ATTR_PMK={0x14, 0xfe, "0f2c928b44c62da7a27e0e953844e023"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "6fa0700565ce7d1c39baaeed123d076f"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "f2fd0f06dbab484a6b48902d0d4824d8"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "1f769229863fe080ded72495c323eb1c"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "98438ef12829c4db02aeff1e2c5a4a68"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24044002}, 0x4004) (async)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0) (async)

03:38:08 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000900), r0)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001c80)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001c40)={&(0x7f0000001400)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) (async)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xe000002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x4, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)
r2 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180))
setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, 0x0)
r3 = accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000000)=0x8, 0x4)

03:38:08 executing program 2:
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:38:08 executing program 1:
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x2, 0x8001) (async)
r1 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180))
setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) (async)
r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x460, 0x2) (async)
accept$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10) (async)
r3 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180))
setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, 0x0) (async)
connect$phonet_pipe(r3, 0x0, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={'syztnl1\x00', <r5=>0x0, 0x4, 0x80, 0x2, 0x9, 0x20, @private2, @mcast2, 0xa0, 0x8000, 0x3, 0x1}}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000580)={'wg1\x00', <r6=>0x0}) (async)
getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000005c0)={@initdev, <r7=>0x0}, &(0x7f0000000600)=0x14) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000640)={@empty, <r8=>0x0}, &(0x7f0000000680)=0x14) (async)
getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000006c0)=<r9=>0x0, &(0x7f0000000700)=0x4)
getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000000740)={@private1, <r10=>0x0}, &(0x7f0000000780)=0x14) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000007c0)={@private2, <r11=>0x0}, &(0x7f0000000800)=0x14) (async)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000840)=<r12=>0x0, &(0x7f0000000880)=0x4) (async)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000008c0)=<r13=>0x0, &(0x7f0000000900)=0x4)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f80)={&(0x7f0000001000)={0x618, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x0, 0x1, @notify_peers_count={{}, {}, {0x0, 0x4, 0x9}}}, {0x0, 0x1, @priority={{{}, {}, {0x0, 0x4, 0x3ff}}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0xfffffffffffffe47}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0xffffffffffffffee, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}, {{0x8, 0x1, r9}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x60}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0xec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @activeport={{}, {}, {0x0, 0x4, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x618}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) (async)
sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00010cbd7000fbdbdf256c00000008002700020000009f00030000000500190104000000040003011c000000080022016e0100000800a00004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x88c5}, 0x800)

03:38:08 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f80)={'vcan0\x00'}) (async)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffc, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "372859478198d93865bfa13d039b42fe"}, @NL80211_ATTR_PMK={0x14, 0xfe, "0f2c928b44c62da7a27e0e953844e023"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "6fa0700565ce7d1c39baaeed123d076f"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "f2fd0f06dbab484a6b48902d0d4824d8"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "1f769229863fe080ded72495c323eb1c"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "98438ef12829c4db02aeff1e2c5a4a68"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24044002}, 0x4004) (async)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)

03:38:08 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000900), r0)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001c80)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001c40)={&(0x7f0000001400)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xe000002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x4, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)
r2 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180))
setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, 0x0)
r3 = accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000000)=0x8, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$team(&(0x7f0000000900), r0) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001c80)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001c40)={&(0x7f0000001400)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) (async)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xe000002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x4, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) (async)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180)) (async)
setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, 0x0) (async)
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0) (async)
setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000000)=0x8, 0x4) (async)

03:38:08 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 36)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:08 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 31)

03:38:08 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0xffffffffffffff11)
sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40049}, 0x8014)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4)

03:38:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6tnl0\x00', <r4=>r1, 0x29, 0x5, 0x0, 0x6, 0x21, @loopback, @rand_addr=' \x01\x00', 0x40, 0x39, 0xa9}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="18010000", @ANYRES16=r3, @ANYBLOB="20002bbd7000fcdbdf25170000003800018008000100", @ANYRES32=r4, @ANYBLOB="0800030000000000080003000000000008000100", @ANYRES32=r1, @ANYBLOB="1400020067726530000000000000000000000000240001800800030001000000080003000300000008000100", @ANYRES32=r1, @ANYBLOB="08000300030000001800018014000200766c616e310000000000000000000000180001801400020076657468305f6d6163767461700000001400018008000100efbf5df8b3eea3ff6e2495b229f1ca0f3ff7cb92d339d643e893a53699b3049b460d8e336c59d9bb874e5981fdbe89fd55dd0795fda02a790b5ed3844d4de27f36238f06513f523c8bae09f37e209871126e451338abeb6393b979d267074de0a2274e0009b28cd0358ae1e21106dd1cea34f20a71405b276ea1f05b781d42b440d92ff951b5b3b0dc0b65ebcbf1d09a2018f69292785358917a989028460902c1ceb8ff45d1351ae08cd090a000"/247, @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="640001801400020076657468315f746f5f626174616476001400020076657468305f746f5f687372000000001400020077673200000000000000000000000000080003000200000008000100", @ANYRES32=r5, @ANYBLOB="1400020076657468315f766972745f7769666900"], 0x118}, 0x1, 0x0, 0x0, 0x4000045}, 0x8010)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=<r6=>0x0, &(0x7f00000002c0)=0x4)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x16c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008804)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', <r8=>0x0})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000500)=<r9=>0x0, &(0x7f0000000540)=0x4)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r7, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000880)={0x118, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x10008080}, 0x4000)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:38:08 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x11c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000001)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)

03:38:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000f80)={'vcan0\x00'}) (async)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6tnl0\x00', <r4=>r1, 0x29, 0x5, 0x0, 0x6, 0x21, @loopback, @rand_addr=' \x01\x00', 0x40, 0x39, 0xa9}}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="18010000", @ANYRES16=r3, @ANYBLOB="20002bbd7000fcdbdf25170000003800018008000100", @ANYRES32=r4, @ANYBLOB="0800030000000000080003000000000008000100", @ANYRES32=r1, @ANYBLOB="1400020067726530000000000000000000000000240001800800030001000000080003000300000008000100", @ANYRES32=r1, @ANYBLOB="08000300030000001800018014000200766c616e310000000000000000000000180001801400020076657468305f6d6163767461700000001400018008000100efbf5df8b3eea3ff6e2495b229f1ca0f3ff7cb92d339d643e893a53699b3049b460d8e336c59d9bb874e5981fdbe89fd55dd0795fda02a790b5ed3844d4de27f36238f06513f523c8bae09f37e209871126e451338abeb6393b979d267074de0a2274e0009b28cd0358ae1e21106dd1cea34f20a71405b276ea1f05b781d42b440d92ff951b5b3b0dc0b65ebcbf1d09a2018f69292785358917a989028460902c1ceb8ff45d1351ae08cd090a000"/247, @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="640001801400020076657468315f746f5f626174616476001400020076657468305f746f5f687372000000001400020077673200000000000000000000000000080003000200000008000100", @ANYRES32=r5, @ANYBLOB="1400020076657468315f766972745f7769666900"], 0x118}, 0x1, 0x0, 0x0, 0x4000045}, 0x8010) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=<r6=>0x0, &(0x7f00000002c0)=0x4)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x16c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008804) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', <r8=>0x0})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000500)=<r9=>0x0, &(0x7f0000000540)=0x4)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r7, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000880)={0x118, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x10008080}, 0x4000)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:38:08 executing program 0:
r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x180000)
accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10)
socketpair(0x18, 0x6, 0x8, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2)
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80010200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, r3, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000010}, 0x810)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000200)=0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', <r5=>0x0, 0x29, 0x25, 0x6, 0x961e, 0x3, @dev={0xfe, 0x80, '\x00', 0x29}, @mcast2, 0x720, 0x7, 0x81, 0x7fff}})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)={0xb0, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x850)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080)={0x23, 0x7, 0x3, 0x2}, 0x10)
r6 = socket(0x18, 0x5, 0x2)
setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000580)=0x1, 0x4)
r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r7, 0x200, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000800)

03:38:08 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0xffffffffffffff11) (async)
sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40049}, 0x8014) (async)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4)

03:38:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6tnl0\x00', <r4=>r1, 0x29, 0x5, 0x0, 0x6, 0x21, @loopback, @rand_addr=' \x01\x00', 0x40, 0x39, 0xa9}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="18010000", @ANYRES16=r3, @ANYBLOB="20002bbd7000fcdbdf25170000003800018008000100", @ANYRES32=r4, @ANYBLOB="0800030000000000080003000000000008000100", @ANYRES32=r1, @ANYBLOB="1400020067726530000000000000000000000000240001800800030001000000080003000300000008000100", @ANYRES32=r1, @ANYBLOB="08000300030000001800018014000200766c616e310000000000000000000000180001801400020076657468305f6d6163767461700000001400018008000100efbf5df8b3eea3ff6e2495b229f1ca0f3ff7cb92d339d643e893a53699b3049b460d8e336c59d9bb874e5981fdbe89fd55dd0795fda02a790b5ed3844d4de27f36238f06513f523c8bae09f37e209871126e451338abeb6393b979d267074de0a2274e0009b28cd0358ae1e21106dd1cea34f20a71405b276ea1f05b781d42b440d92ff951b5b3b0dc0b65ebcbf1d09a2018f69292785358917a989028460902c1ceb8ff45d1351ae08cd090a000"/247, @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="640001801400020076657468315f746f5f626174616476001400020076657468305f746f5f687372000000001400020077673200000000000000000000000000080003000200000008000100", @ANYRES32=r5, @ANYBLOB="1400020076657468315f766972745f7769666900"], 0x118}, 0x1, 0x0, 0x0, 0x4000045}, 0x8010)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=<r6=>0x0, &(0x7f00000002c0)=0x4)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x16c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008804)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', <r8=>0x0})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000500)=<r9=>0x0, &(0x7f0000000540)=0x4)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r7, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000880)={0x118, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x10008080}, 0x4000)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000f80)={'vcan0\x00'}) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6tnl0\x00', r1, 0x29, 0x5, 0x0, 0x6, 0x21, @loopback, @rand_addr=' \x01\x00', 0x40, 0x39, 0xa9}}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)) (async)
sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="18010000", @ANYRES16=r3, @ANYBLOB="20002bbd7000fcdbdf25170000003800018008000100", @ANYRES32=r4, @ANYBLOB="0800030000000000080003000000000008000100", @ANYRES32=r1, @ANYBLOB="1400020067726530000000000000000000000000240001800800030001000000080003000300000008000100", @ANYRES32=r1, @ANYBLOB="08000300030000001800018014000200766c616e310000000000000000000000180001801400020076657468305f6d6163767461700000001400018008000100efbf5df8b3eea3ff6e2495b229f1ca0f3ff7cb92d339d643e893a53699b3049b460d8e336c59d9bb874e5981fdbe89fd55dd0795fda02a790b5ed3844d4de27f36238f06513f523c8bae09f37e209871126e451338abeb6393b979d267074de0a2274e0009b28cd0358ae1e21106dd1cea34f20a71405b276ea1f05b781d42b440d92ff951b5b3b0dc0b65ebcbf1d09a2018f69292785358917a989028460902c1ceb8ff45d1351ae08cd090a000"/247, @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="640001801400020076657468315f746f5f626174616476001400020076657468305f746f5f687372000000001400020077673200000000000000000000000000080003000200000008000100", @ANYRES32=r5, @ANYBLOB="1400020076657468315f766972745f7769666900"], 0x118}, 0x1, 0x0, 0x0, 0x4000045}, 0x8010) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x16c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008804) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000f80)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) (async)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r7, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000880)={0x118, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x10008080}, 0x4000) (async)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)

03:38:08 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x11c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000001)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f80)={'vcan0\x00'}) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (async)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x11c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000001) (async)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0) (async)

03:38:09 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0xffffffffffffff11)
sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40049}, 0x8014)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0xffffffffffffff11) (async)
sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40049}, 0x8014) (async)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async)

03:38:09 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 37)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:09 executing program 0:
r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x180000) (async)
accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async, rerun: 64)
socketpair(0x18, 0x6, 0x8, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (rerun: 64)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2)
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80010200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, r3, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000010}, 0x810) (async, rerun: 64)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000200)=0x4) (async, rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', <r5=>0x0, 0x29, 0x25, 0x6, 0x961e, 0x3, @dev={0xfe, 0x80, '\x00', 0x29}, @mcast2, 0x720, 0x7, 0x81, 0x7fff}})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)={0xb0, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x850) (async, rerun: 32)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080)={0x23, 0x7, 0x3, 0x2}, 0x10) (async, rerun: 32)
r6 = socket(0x18, 0x5, 0x2)
setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000580)=0x1, 0x4) (async)
r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r7, 0x200, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000800)

03:38:09 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 32)

03:38:09 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4)

03:38:09 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0}) (rerun: 32)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x11c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000001) (async)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)

03:38:09 executing program 2:
r0 = io_uring_setup(0x5714, &(0x7f0000000000)={0x0, 0xee34, 0x10, 0x3, 0x38d})
io_uring_setup(0x6e15, &(0x7f0000000080)={0x0, 0x5299, 0x1, 0x3, 0x253, 0x0, r0})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

03:38:09 executing program 0:
r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x180000) (async)
accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async)
socketpair(0x18, 0x6, 0x8, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2)
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80010200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, r3, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000010}, 0x810) (async)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000200)=0x4) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', <r5=>0x0, 0x29, 0x25, 0x6, 0x961e, 0x3, @dev={0xfe, 0x80, '\x00', 0x29}, @mcast2, 0x720, 0x7, 0x81, 0x7fff}})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)={0xb0, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x850) (async)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080)={0x23, 0x7, 0x3, 0x2}, 0x10)
r6 = socket(0x18, 0x5, 0x2)
setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000580)=0x1, 0x4)
r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r7, 0x200, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000800)

03:38:09 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) (rerun: 32)

03:38:09 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 38)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:09 executing program 2:
r0 = io_uring_setup(0x5714, &(0x7f0000000000)={0x0, 0xee34, 0x10, 0x3, 0x38d})
io_uring_setup(0x6e15, &(0x7f0000000080)={0x0, 0x5299, 0x1, 0x3, 0x253, 0x0, r0})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
io_uring_setup(0x5714, &(0x7f0000000000)={0x0, 0xee34, 0x10, 0x3, 0x38d}) (async)
io_uring_setup(0x6e15, &(0x7f0000000080)={0x0, 0x5299, 0x1, 0x3, 0x253, 0x0, r0}) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x0) (async)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) (async)

03:38:09 executing program 0:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x180800)
r2 = syz_io_uring_setup(0x75f2, &(0x7f0000000240)={0x0, 0xabe0, 0x0, 0x4, 0x3a}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000007c0), &(0x7f0000000200))
accept4$phonet_pipe(r1, 0x0, 0x0, 0xc00)
io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4)
sendto$rose(0xffffffffffffffff, &(0x7f0000000000)="a808a44efb81a8921e07387f0cd05dd925343c34f7d3530933075c06fbb295bb4014e7c8d05476e4744d9b329d7dce1a3454401066d7e31e8eadd462bbae008771dcd827", 0x44, 0x4000040, 0x0, 0x0)
r3 = socket(0x6, 0xa, 0x10000)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4)

03:38:09 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 33)

03:38:09 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) (async)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4)

03:38:09 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x200080c1)

03:38:09 executing program 2:
r0 = io_uring_setup(0x5714, &(0x7f0000000000)={0x0, 0xee34, 0x10, 0x3, 0x38d})
io_uring_setup(0x6e15, &(0x7f0000000080)={0x0, 0x5299, 0x1, 0x3, 0x253, 0x0, r0})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

03:38:09 executing program 0:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2) (async, rerun: 64)
r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x180800) (rerun: 64)
r2 = syz_io_uring_setup(0x75f2, &(0x7f0000000240)={0x0, 0xabe0, 0x0, 0x4, 0x3a}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000007c0), &(0x7f0000000200)) (async)
accept4$phonet_pipe(r1, 0x0, 0x0, 0xc00)
io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async)
getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async)
sendto$rose(0xffffffffffffffff, &(0x7f0000000000)="a808a44efb81a8921e07387f0cd05dd925343c34f7d3530933075c06fbb295bb4014e7c8d05476e4744d9b329d7dce1a3454401066d7e31e8eadd462bbae008771dcd827", 0x44, 0x4000040, 0x0, 0x0) (async)
r3 = socket(0x6, 0xa, 0x10000)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4)

03:38:09 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 39)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:09 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)

03:38:09 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x200080c1)

03:38:09 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 34)

03:38:09 executing program 2:
r0 = socket$bt_cmtp(0x1f, 0x3, 0x5)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000000)={@none, 0x3ff})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket(0x22, 0x2, 0x6)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0xd0, 0x0, 0x401, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x8701, 0xf37, 0xfffffff9}})

03:38:09 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) (async)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)

03:38:09 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x200080c1)

03:38:09 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 40)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:09 executing program 2:
r0 = socket$bt_cmtp(0x1f, 0x3, 0x5)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000000)={@none, 0x3ff})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket(0x22, 0x2, 0x6)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0xd0, 0x0, 0x401, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x8701, 0xf37, 0xfffffff9}})
socket$bt_cmtp(0x1f, 0x3, 0x5) (async)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000000)={@none, 0x3ff}) (async)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
socket(0x22, 0x2, 0x6) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0xd0, 0x0, 0x401, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x8701, 0xf37, 0xfffffff9}}) (async)

03:38:09 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) (async)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)

03:38:10 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x20000011)
syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff)

03:38:10 executing program 0:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x180800) (async)
r2 = syz_io_uring_setup(0x75f2, &(0x7f0000000240)={0x0, 0xabe0, 0x0, 0x4, 0x3a}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000007c0), &(0x7f0000000200))
accept4$phonet_pipe(r1, 0x0, 0x0, 0xc00) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async)
getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4)
sendto$rose(0xffffffffffffffff, &(0x7f0000000000)="a808a44efb81a8921e07387f0cd05dd925343c34f7d3530933075c06fbb295bb4014e7c8d05476e4744d9b329d7dce1a3454401066d7e31e8eadd462bbae008771dcd827", 0x44, 0x4000040, 0x0, 0x0)
r3 = socket(0x6, 0xa, 0x10000)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4)

03:38:10 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 35)

03:38:10 executing program 1:
socketpair(0x21, 0x5, 0x75e1, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
accept4$rose(r0, &(0x7f0000000040)=@full={0xb, @dev, @netrom, 0x0, [@remote, @remote, @bcast, @null, @rose, @null]}, &(0x7f0000000080)=0x40, 0x80800)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r1, 0x0, 0x0)

03:38:10 executing program 2:
r0 = socket$bt_cmtp(0x1f, 0x3, 0x5)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000000)={@none, 0x3ff}) (async)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
r1 = socket(0x22, 0x2, 0x6)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0xd0, 0x0, 0x401, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x8701, 0xf37, 0xfffffff9}})

03:38:10 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x20000011) (async)
syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff)

03:38:10 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 41)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:10 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x20000011)
syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x20000011) (async)
syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) (async)

03:38:10 executing program 2:
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)

03:38:10 executing program 1:
socketpair(0x21, 0x5, 0x75e1, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
accept4$rose(r0, &(0x7f0000000040)=@full={0xb, @dev, @netrom, 0x0, [@remote, @remote, @bcast, @null, @rose, @null]}, &(0x7f0000000080)=0x40, 0x80800)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r1, 0x0, 0x0)
socketpair(0x21, 0x5, 0x75e1, &(0x7f0000000000)) (async)
accept4$rose(r0, &(0x7f0000000040)=@full={0xb, @dev, @netrom, 0x0, [@remote, @remote, @bcast, @null, @rose, @null]}, &(0x7f0000000080)=0x40, 0x80800) (async)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
connect$phonet_pipe(r1, 0x0, 0x0) (async)

03:38:10 executing program 0:
r0 = socket$bt_bnep(0x1f, 0x3, 0x4)
r1 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180))
setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
r3 = accept4$phonet_pipe(r2, 0x0, 0x0, 0x1000)
connect$phonet_pipe(r2, &(0x7f0000000000)={0x23, 0x81, 0x9, 0x3}, 0x10)
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@private1, <r5=>0x0}, &(0x7f0000000100)=0x14)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@loopback, <r6=>0x0}, &(0x7f00000001c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r7=>0x0, 0x4, 0xb6, 0x3, 0x2, 0x4, @dev={0xfe, 0x80, '\x00', 0x16}, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7, 0x7, 0x81, 0x9}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', <r8=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', <r9=>0x0, 0x2f, 0x6f, 0x4, 0x4, 0x19, @private0, @empty, 0x80, 0x1, 0x4, 0x2}})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb8, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x7}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x200}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x9}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x7}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x5}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x7fff}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x8}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x80}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x20040880)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000003c0)=<r11=>0x0, &(0x7f0000000400)=0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000440)={'team0\x00', <r12=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="e8040000", @ANYRES16=r4, @ANYBLOB="08009428bb2cfbdbdf2503000000088001000b4ac257e5237837f40b145daabbd4f03ef03f52847cf9c7012b36eb55d6ca94b0f790a976c7101fa184580000", @ANYRES32=r5, @ANYBLOB="500102804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400ff0f0443ff030000800003fbfffeffff7e290400010400003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="b80002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400a446000008000100", @ANYRES32=0x0, @ANYBLOB="8401028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400010000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040006007f03bb565a4dc4006fff4000000009000209060000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="3c000100240001006c625f74785f6d6574686f6400000000000000000000000000000000000000000500030005000000090004006861736800000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000080000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=r12, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x4e8}, 0x1, 0x0, 0x0, 0x880}, 0x4)

03:38:11 executing program 5:
r0 = getuid()
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="4d0000007d02d597ad1400000008000000000000000000104009000000ffff00000800000000000000000001002a01002701005d020027ad2d01f8dbc2696dbd7d14d50486ac1a5040c35af96575a4f73d75823dd966b6265ebc25d5339eb13c0edbcb1d83928ced8605374abee80dbc01e3339885c354cf55b4e1202c856524b8a2551f43df98bacf0acb31aacf556fd450ec23918d443eb3c8a9aff1a6d688354ebc88fa3637b37607fcce3c8a95c7ba8f5fbd6e6cbf8a1a954d918f450a49491caa67438be1a3e36308f30d88568ab3d9b9f1d2ddf46ad0a5ad4c81e3cf201a508d3d19731d7da6451ced13125af0ad5b7cfdee", @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYRES32=r0], 0x4d)
getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x100008)

03:38:11 executing program 1:
socketpair(0x21, 0x5, 0x75e1, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
accept4$rose(r0, &(0x7f0000000040)=@full={0xb, @dev, @netrom, 0x0, [@remote, @remote, @bcast, @null, @rose, @null]}, &(0x7f0000000080)=0x40, 0x80800)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r1, 0x0, 0x0)
socketpair(0x21, 0x5, 0x75e1, &(0x7f0000000000)) (async)
accept4$rose(r0, &(0x7f0000000040)=@full={0xb, @dev, @netrom, 0x0, [@remote, @remote, @bcast, @null, @rose, @null]}, &(0x7f0000000080)=0x40, 0x80800) (async)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
connect$phonet_pipe(r1, 0x0, 0x0) (async)

03:38:11 executing program 2:
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)

03:38:11 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 36)

03:38:11 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 42)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:11 executing program 5:
r0 = getuid()
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="4d0000007d02d597ad1400000008000000000000000000104009000000ffff00000800000000000000000001002a01002701005d020027ad2d01f8dbc2696dbd7d14d50486ac1a5040c35af96575a4f73d75823dd966b6265ebc25d5339eb13c0edbcb1d83928ced8605374abee80dbc01e3339885c354cf55b4e1202c856524b8a2551f43df98bacf0acb31aacf556fd450ec23918d443eb3c8a9aff1a6d688354ebc88fa3637b37607fcce3c8a95c7ba8f5fbd6e6cbf8a1a954d918f450a49491caa67438be1a3e36308f30d88568ab3d9b9f1d2ddf46ad0a5ad4c81e3cf201a508d3d19731d7da6451ced13125af0ad5b7cfdee", @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYRES32=r0], 0x4d)
getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x100008)

03:38:11 executing program 0:
r0 = socket$bt_bnep(0x1f, 0x3, 0x4)
r1 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180))
setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) (async)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
r3 = accept4$phonet_pipe(r2, 0x0, 0x0, 0x1000)
connect$phonet_pipe(r2, &(0x7f0000000000)={0x23, 0x81, 0x9, 0x3}, 0x10) (async)
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@private1, <r5=>0x0}, &(0x7f0000000100)=0x14)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@loopback, <r6=>0x0}, &(0x7f00000001c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r7=>0x0, 0x4, 0xb6, 0x3, 0x2, 0x4, @dev={0xfe, 0x80, '\x00', 0x16}, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7, 0x7, 0x81, 0x9}}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', <r8=>0x0}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', <r9=>0x0, 0x2f, 0x6f, 0x4, 0x4, 0x19, @private0, @empty, 0x80, 0x1, 0x4, 0x2}})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb8, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x7}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x200}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x9}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x7}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x5}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x7fff}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x8}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x80}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x20040880) (async)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000003c0)=<r11=>0x0, &(0x7f0000000400)=0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000440)={'team0\x00', <r12=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="e8040000", @ANYRES16=r4, @ANYBLOB="08009428bb2cfbdbdf2503000000088001000b4ac257e5237837f40b145daabbd4f03ef03f52847cf9c7012b36eb55d6ca94b0f790a976c7101fa184580000", @ANYRES32=r5, @ANYBLOB="500102804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400ff0f0443ff030000800003fbfffeffff7e290400010400003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="b80002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400a446000008000100", @ANYRES32=0x0, @ANYBLOB="8401028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400010000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040006007f03bb565a4dc4006fff4000000009000209060000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="3c000100240001006c625f74785f6d6574686f6400000000000000000000000000000000000000000500030005000000090004006861736800000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000080000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=r12, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x4e8}, 0x1, 0x0, 0x0, 0x880}, 0x4)

03:38:11 executing program 1:
socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x1a, 0x800, 0x6)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x6000001}, 0x40)

03:38:11 executing program 2:
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)

03:38:11 executing program 5:
r0 = getuid()
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="4d0000007d02d597ad1400000008000000000000000000104009000000ffff00000800000000000000000001002a01002701005d020027ad2d01f8dbc2696dbd7d14d50486ac1a5040c35af96575a4f73d75823dd966b6265ebc25d5339eb13c0edbcb1d83928ced8605374abee80dbc01e3339885c354cf55b4e1202c856524b8a2551f43df98bacf0acb31aacf556fd450ec23918d443eb3c8a9aff1a6d688354ebc88fa3637b37607fcce3c8a95c7ba8f5fbd6e6cbf8a1a954d918f450a49491caa67438be1a3e36308f30d88568ab3d9b9f1d2ddf46ad0a5ad4c81e3cf201a508d3d19731d7da6451ced13125af0ad5b7cfdee", @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYRES32=r0], 0x4d)
getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x100008)

03:38:11 executing program 0:
r0 = socket$bt_bnep(0x1f, 0x3, 0x4)
r1 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180))
setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) (async)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
r3 = accept4$phonet_pipe(r2, 0x0, 0x0, 0x1000) (async, rerun: 32)
connect$phonet_pipe(r2, &(0x7f0000000000)={0x23, 0x81, 0x9, 0x3}, 0x10) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@private1, <r5=>0x0}, &(0x7f0000000100)=0x14) (async)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@loopback, <r6=>0x0}, &(0x7f00000001c0)=0x14) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r7=>0x0, 0x4, 0xb6, 0x3, 0x2, 0x4, @dev={0xfe, 0x80, '\x00', 0x16}, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7, 0x7, 0x81, 0x9}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', <r8=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', <r9=>0x0, 0x2f, 0x6f, 0x4, 0x4, 0x19, @private0, @empty, 0x80, 0x1, 0x4, 0x2}}) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb8, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x7}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x200}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x9}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x7}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x5}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x7fff}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x8}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x80}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x20040880)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000003c0)=<r11=>0x0, &(0x7f0000000400)=0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000440)={'team0\x00', <r12=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="e8040000", @ANYRES16=r4, @ANYBLOB="08009428bb2cfbdbdf2503000000088001000b4ac257e5237837f40b145daabbd4f03ef03f52847cf9c7012b36eb55d6ca94b0f790a976c7101fa184580000", @ANYRES32=r5, @ANYBLOB="500102804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400ff0f0443ff030000800003fbfffeffff7e290400010400003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="b80002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400a446000008000100", @ANYRES32=0x0, @ANYBLOB="8401028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400010000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040006007f03bb565a4dc4006fff4000000009000209060000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="3c000100240001006c625f74785f6d6574686f6400000000000000000000000000000000000000000500030005000000090004006861736800000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000080000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=r12, @ANYBLOB="2801028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004004106000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004007fe30000080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000010000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400f30100003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x4e8}, 0x1, 0x0, 0x0, 0x880}, 0x4)

03:38:11 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 43)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:11 executing program 1:
socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x1a, 0x800, 0x6)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x6000001}, 0x40)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) (async)
socket(0x1a, 0x800, 0x6) (async)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x6000001}, 0x40) (async)

03:38:11 executing program 2:
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0xde, 0x0, 0x3f}, 0x10)
socketpair(0x1e, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000100)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xffffffff})
socket(0x29, 0x5, 0x9)
r2 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, 0x0)
accept4$phonet_pipe(r2, 0x0, 0x0, 0x800)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000003c0))
accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x0, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
accept4$phonet_pipe(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x1c0800)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:38:11 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
sendmsg$NL80211_CMD_JOIN_OCB(r0, 0x0, 0x0)

03:38:11 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 37)

03:38:11 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
sendmsg$NL80211_CMD_JOIN_OCB(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f80)={'vcan0\x00'}) (async)
sendmsg$NL80211_CMD_JOIN_OCB(r0, 0x0, 0x0) (async)

03:38:11 executing program 1:
socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = socket(0x1a, 0x800, 0x6)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x6000001}, 0x40)

03:38:11 executing program 0:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001340)={@mcast1, <r1=>0x0}, &(0x7f0000001380)=0x14)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000013c0)=<r2=>0x0, &(0x7f0000001400)=0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000014c0)={'ip6_vti0\x00', &(0x7f0000001440)={'ip6tnl0\x00', <r3=>0x0, 0x4, 0x40, 0x8, 0x3, 0x3e, @mcast1, @mcast1, 0x40, 0x20, 0x10000, 0x9}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'wg2\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001300), 0xc, &(0x7f0000001600)={&(0x7f0000001540)={0x90, r0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x24044800}, 0x20004840)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001280)={&(0x7f0000000080)={0x11ec, r0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x10dc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_MASK={0xb5, 0x5, "591b025f18999694d668e73777af004da9ec9b3636e2ab1afa3459210e04fa0786c15425c2a874b55d2688215f025044d08bf8f308683b7d33e2334cae6670c20c27f0bcf65bbbc27835241dc9b95d896bc42a55ff62cceb1fae3a75f0ada60c7d51c8c3b50ad301b394dc7aa683b6bb4201d02ce010e232081039d20aa40062524d3061c5a329c41f084b69bcdf0a527056575d1c01ce10ec0eeb599ebc9970d82538557b2faf1daa68609eb8e23d11ae"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xfc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4a, 0x5, "2a65f804d67f14c593d4991372c668bd621a1980ac73afed433b4441fd51c7253af47853476db3515c732dbaae2824b402507670e027457e0e5f715ef1d58aa97c18d189af2e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xad}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.:[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffe00}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1800000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, '{^)^[v(\\}\'&[\']\'-&(*$\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}]}]}, 0x11ec}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000001)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:38:11 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 44)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:11 executing program 0:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001340)={@mcast1, <r1=>0x0}, &(0x7f0000001380)=0x14)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000013c0)=<r2=>0x0, &(0x7f0000001400)=0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000014c0)={'ip6_vti0\x00', &(0x7f0000001440)={'ip6tnl0\x00', <r3=>0x0, 0x4, 0x40, 0x8, 0x3, 0x3e, @mcast1, @mcast1, 0x40, 0x20, 0x10000, 0x9}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'wg2\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001300), 0xc, &(0x7f0000001600)={&(0x7f0000001540)={0x90, r0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x24044800}, 0x20004840)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001280)={&(0x7f0000000080)={0x11ec, r0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x10dc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_MASK={0xb5, 0x5, "591b025f18999694d668e73777af004da9ec9b3636e2ab1afa3459210e04fa0786c15425c2a874b55d2688215f025044d08bf8f308683b7d33e2334cae6670c20c27f0bcf65bbbc27835241dc9b95d896bc42a55ff62cceb1fae3a75f0ada60c7d51c8c3b50ad301b394dc7aa683b6bb4201d02ce010e232081039d20aa40062524d3061c5a329c41f084b69bcdf0a527056575d1c01ce10ec0eeb599ebc9970d82538557b2faf1daa68609eb8e23d11ae"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xfc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4a, 0x5, "2a65f804d67f14c593d4991372c668bd621a1980ac73afed433b4441fd51c7253af47853476db3515c732dbaae2824b402507670e027457e0e5f715ef1d58aa97c18d189af2e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xad}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.:[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffe00}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1800000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, '{^)^[v(\\}\'&[\']\'-&(*$\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}]}]}, 0x11ec}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000001) (async)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:38:11 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r0 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180))
setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0)
connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x7, 0x20, 0x3}, 0x10)
r1 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180))
setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000040), 0x4)

03:38:12 executing program 2:
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0xde, 0x0, 0x3f}, 0x10) (async)
socketpair(0x1e, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={0x0}}, 0x0) (async)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000100)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xffffffff}) (async)
socket(0x29, 0x5, 0x9) (async)
r2 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, 0x0) (async)
accept4$phonet_pipe(r2, 0x0, 0x0, 0x800) (async)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0) (async)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) (async)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000003c0)) (async)
accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) (async)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x0, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (async)
accept4$phonet_pipe(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x1c0800) (async)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:38:12 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f80)={'vcan0\x00'}) (async)
sendmsg$NL80211_CMD_JOIN_OCB(r0, 0x0, 0x0)

03:38:12 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 38)

03:38:12 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r0 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180))
setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0)
connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x7, 0x20, 0x3}, 0x10)
r1 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180))
setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000040), 0x4)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) (async)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180)) (async)
setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async)
connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x7, 0x20, 0x3}, 0x10) (async)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180)) (async)
setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) (async)
setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000040), 0x4) (async)

03:38:12 executing program 0:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001340)={@mcast1, <r1=>0x0}, &(0x7f0000001380)=0x14) (rerun: 32)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000013c0)=<r2=>0x0, &(0x7f0000001400)=0x4) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000014c0)={'ip6_vti0\x00', &(0x7f0000001440)={'ip6tnl0\x00', <r3=>0x0, 0x4, 0x40, 0x8, 0x3, 0x3e, @mcast1, @mcast1, 0x40, 0x20, 0x10000, 0x9}}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'wg2\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001300), 0xc, &(0x7f0000001600)={&(0x7f0000001540)={0x90, r0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x24044800}, 0x20004840) (async, rerun: 32)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001280)={&(0x7f0000000080)={0x11ec, r0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x10dc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_MASK={0xb5, 0x5, "591b025f18999694d668e73777af004da9ec9b3636e2ab1afa3459210e04fa0786c15425c2a874b55d2688215f025044d08bf8f308683b7d33e2334cae6670c20c27f0bcf65bbbc27835241dc9b95d896bc42a55ff62cceb1fae3a75f0ada60c7d51c8c3b50ad301b394dc7aa683b6bb4201d02ce010e232081039d20aa40062524d3061c5a329c41f084b69bcdf0a527056575d1c01ce10ec0eeb599ebc9970d82538557b2faf1daa68609eb8e23d11ae"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "7c3ec546d365edd8d7bf61ed53fc5275c52265e93af7ce276c977afe861771bf9113206cb47f369cc688d66223ebe5b823289cdffd11716d7fb4bd71689f386e484a1eb8a8bcb9cedef82aef4fca4d1789dea58306df96024600e032ddacc70a6538e832f63fc2a9516f4e98b19f084e41d018eed2895fdf6ff80597c7320e8cf57726354bcb4009d411a11901cf69169646f4c311ac03250471215aa399dbf07441145b91e2edc12360c56acfd1fbee5be90441878a6e13d594d00ecfb2cc3990c0e3d17dc1bacd016ded7adba067ccdfe8268bc62f623d11e26de42db37a59cd33828bd4582b1250ec3f729566f443cfe70c6146868190f43d56e7b54d223bf5df6a213f489be22c9e500f917ca865b0fd1b450bc962ee7f3cb848c78c5ec51ce0e9ad465efaa52461993f7e204c6ac288c6d6c25dbc5f4f299349df21c3212358c95276daf186df59c0043d3349fe66ebadf823c364d9c864bf9a9901ab2422740bda40739f0ad02c04b88d9b18859a683ee29e18cc7c1cfa165185d7c7232e6bc88354d3c0b0d814a6cce8addaaa08932e024cb651f0b899c02baab2298419f55f8e5aa5836c0d3be8d15af043c78bab77f707acdc211b446ec965d758bd4281abacb53ce7949cf7f3d25f1483573283c94c0cfaf59d004e1b53eb9dad8fbc9cde824789a898612fac2641b71e3e842333e558c077da4dc5ddec19a2e3450b939c1635483a166c6ee3da9e718f230b21c07a037251ac1bffa8f40ff3cef69612c2be6ed0e86a39e9f8975319fcb41d79fcea7c564b09907dff55d8eef872a21704f685df0825bfeee27587f0cf92ec310431182c5856f332218bc57119c63c2c32815e109c3b9829511296eb767147885d45d10f9b0ca24b2a8bd0fe5aa999bad5f361d4b49305f25d393d6b8feb4ccb4bc595c6413f6496850e6c211c23f4274bd6bf068530e8e3880ff5f8cab362bf79656ef0a8c96ced6dc67d21faa8ff74de6d37c9562e906add1f696d25998e5b6f7d36151b568da28ebb046da078ce58b815184d04caaea2681d2354b444d5b15fef2f4aaeac0a83894fc01ca7937f997fc5c745819a3a1330adbd15903f2e10d424a0a35c10aa3c7db38c6aaa1fe4eff33d3cbe40531a087a839577c0aedebd9d88eed10dfa4da6ce264bcd73cae8a004d143a8699bf6d0f095bccd31c859ae794a7c076ffc6316d698c3a92cc57257524379b40e85f44341b2086dd7cac357713d4ac0fe1c785172199ef5b192513135a4a4ccb4bf6d3b8aa8ac1d681c31609197511e3404bc993c3c5a008cb344151dc19f874c2198259ac341b51f830ea2206e9a23df4d94a77d2210a11cec276e99bad80dfa79f571a5fa6195a794113e577c8604457228a7bb62f73091530556dfc351f6c5f46b336e7769df18a90bfc5b05cb6a3dbc636ecd13d04cd8ce3a3540b995b2b7bbe8f354e43f03e4333ef7908671a4669cdfa8dc958416d2d3c0dabc8a618838f8079e0fddc70fc2dda3ad3bff37325b40a2365c652143077d4abc3fe411966a6f2af9cc10dd6a0bf8ee1c855c91ba82b761d4bc09379f123d5bf6c5af92b71edc6b47f0740952cd38e732d256b6cb612a849c3851a6d7646ddc8616e00e332b380570e9c5339baacf0c4e1bb1faf0d6453c6d916297a48f0b34355616775944f4f39f0ec42d2a9278e5484636eef8dd4053bab160355b7c5baf41237e7f365f7877e6b9140d8712647485b46bc973199dc420fd76f9bc3e404fe631b9513a974b6585e1f9cd861bdd1e501b758a93362a8af041da9885020dd157d31a0b519a259fec7ec30b9aff3b8db49aaeaa3e7b24a955b9d1053aabe3a71d65c74fc8d3f706bcc84603aaaf602f3058f29f7ddfc59a965a134b688890355bc2534d3bfd0ae30b5380b9d687dd2ea9ac6e2fc04274f3b3488c2d84fd8b916de14da11255bdca91817a1ec8df414d301a6552eec7c818e9fa7ddfb472b127da6f0f14f61f7b33ff1fcdc96685422a7a0f04b11b2d78ded4963492a765926f101f5f5a648bcd152d024d30c86ce8baae80d31ee756a80ac937d26d59f005d0378cc0ebfd7dd284956cb9cd0c2540b3207e6e3e7e52d7c9e9ff5809bf1a6495aa2959387e3287d84fc8a99362d96fa0e07e83d8853f53e4a1c23cf9593a5ff23c12bbfcd6b4ce4f24b48390b80911b0f1c66d3dea9f2fcd1d0e8f64288727a9276e73bba5b871954f501b66adcebd22fe99ebcb953bfb9ec21fbf7694feb4b60ff4a9e965714af8080dc3f36411948d90608ebd8bf86079b11e24cd91a4c2126e634221e67c2a674797889011b83c8221f453f208af3566a7270690f09ca01b0aba7bee8be7ce6727c7c18da191155f62daa7417037c1b190644110d0e4cfff6a5f219b1b8b5772abe4749e9d9f54aff56db019dc1beda1d2363aed4206c8df805d138a3cc3c2effb3e40253b92d737a28e428b4c28026ebce61390327a02c6ca018ca16ab65848b3ae32f3b38e26b2b15c24490fc46ff46ab1604d236d0ea5f7f7f5dd1c7933f3f365ef678cd21fa8397301b3da1708890084e9de0c13b852d46f45a39d63161586321c16778dfcad5e9238e6d5427d9192c54ad7a4ed1da354b7ea2662e1a08180bbec4692721d05d2847e3c1f8ffb3a3ae2a649f571e2ec60ab6cdf58b0984df8742abfcccd3276ac1c0e809c0a258020189dc23bf55f59e8e9441bc5ffb5f22eed2ab03f50ccd073fd59f8cd508164c13b12291632c77121b627e33e7b1acc05101d1798ae1279acd98ee1de907e0bbb3811f89c2830c290420fc36f9ae57e234c5403cd8453f8f9e5b0015105dcacea791ef497ecb9b1a7b1a238aac75b018e8aaf7a1675a57cd6ceb2a8cfe3952cdfe741d95946fd37d210b688d5dcd99df7b7e128ba0c28bc25ca15dd33c583fc2ac5d3495791a25734f95efe30ac9b9df6ba52f6044cc7d9d142aec4f6752c0014de3cdb31dc23a7d6b7cbb7195c1bcc5a3b59acb1148efe22d78f6f66b6c54243bcb44581f26559188d8155f1eedf1fefbd725e520721d4b2cee8567e877db65c87d95247f47659e420d8b3390ea074d13b7f4a91f8175ef3d4b5da57c19e7711ee64bfaef407dbc41de6be6917488972842f773baac057d2b074b2db9ff4cbeb2addafbb5ac081ddeefa755d08f7c6a343c822b0d8ab52b6e4351772a4008da529dd459f6da05eb275d43be8206c0373ab06bf86ad4b1c8b4ff3136f6c79eb65cf9b805ee57510dbf76ace34275540115386de78adf5f3a4832a93a4c27dacd331a5242e82eba81a385451a0f6b47f3b6bea0edb2ec944e67684aa26321b5783094b8471061391da5ee4197a4ebde0af46d2f06a578ed403fb00da7b8951857dba897c1abfba85f517b4ace999a9b8a833244018a19a9ecc19415b6cf977dfa4d99c7f720b59f544f87186b9959c04e9789e51df43a1d4ec1d06aef6b6a032391b132438af9c6b16ddfa18bbf7421e33fd34f631cbf9d95f435a064e6452826c19ce24e81e9720033e90cc6374edec4015e9aa7ceed06d9eeb6f977f838917de410604181032943bfb00fa1728972e7ad0d91d966b3e135b0c6ea18b6a852d3f86d51cf24d1f6dd2b332328e89397efb83e6332e715e21e969d9485eb3331178224c2207a96f8635b3469a2d8a40a1f8283472a9827ae58eca3aa6577da39ef8596082fb95e070f689ae2f728233aae2338361f91782ea608d06b4fc0f7b9dc7f0202b37688f61e5ba83d5b65526483d5fe34388427ce04f0bf5e8716c96d47e7c7c7bd2baf9ce972b18710807966d9af7cfa0cb3ae42a38f2bc68fbe696b1e32554cf2d03eb788bb7d4200b1182fa6e92c7c438c6adbe42a64d60ce803a85dbe843b6e897251167e0984cf42d844140de78202c0af249efeb950f54e12b49741968309ef347b58d779ea8a51ff75a535d8c97fc2f6e2568f0d557bcb5a0a81dde8f88119d46033142cbd8b8d4f4f8b26efd11c7b2a5f21d47660ed2835524a8d932a28deef23b10e4de37515679d7554045fdfbb3fb266b6bcbb93f2d17e6cad66ed4e049e02d5a620623c7c380174afe19e62f46b16bbfea9c1d9beb6d99797db3e2476e275ee2ca5c3bdc52508cf04ecf98d82d5b34e4104d28973401fa7ae28412c674ea9618a45c96df26ecd13f688a58aa9bffdf441cd63fa4235f1a77e67c41a7dfcbbf881d0b37b6b9c645f7b516bf27bcd7ee738c924faa5c9600b5f70fe184f34ca3d6f75236f97839e2b9ff285b578235f22ba83c05456c0d291add5eea2c8500364261724fa4f1e614c2136a487440c834d29425945e455231766681c547999b85036208904ffed4d3a552d5c1540b76a6468c48193d0a5760128193e62f5fd3a830ad13ca82bf70953a9283af905e5c9127807b5ebada6d57195b445d0d2e4736216b66e2e2d65c92b6a4f3043f1e5d3c39c903928d4df1c09d201b0b334eb4841ff21c2ba7d46a691c60b0e153a69011c8bb13baee0f64c8af3d70d74148b391e72aab7bb3d8d5fa23ae552d9541597961534bb31382c4e42a9fea86ed8a0cf568f34b48c1d8cd424dfb48765829c92c4c8fd1084632568e3617e04d27b71dbda8f76148a4d1a4d45f983b982400d39baecbdfc4a38f4cb85e367bfb165051cd1d431a440ddcdaa720ea7e292410b03829fec96e363aa2ca3a16e3984b5fb954eca7b531a6e040c0c43d2bba8bf457de2b51c3d7118984afbbe908bd58791dde87dfd83d46c14c973f8aa2bff122a8c294c6bc68abae09e4aea2c222a3d814ea08c629217eb235c1b5a5f3418c7c53b027f7c32297837e7970462c05a186218e7e04a1bc668246a42f9b31e3bdd840d1cb8600eeaefcf912434f033ed046e2a1f5a7f3641168e7b909f43a6c8b3d6f1ffcb3e4eaa8cbbe9fd091823576766eb4dc6876137794990fe344851acd9ff6cbe00411e7342f7147bf01dd8fe58087acf7a9cbad5b97bf47dc05b0b97a82eb01cef620f97da5cb1eb6e4ab010c0f97ec400b61beea8f618c20e98e2596153095e9f482be686cf7518e9d2b2509f0d0395635358027fc809a7f50d50a54234d2ce07ef65f8d3de0f6b7d31fafaed7982ed57d87bd504a6c3dafe4455f408e6c4886c4e41da954eb66759d74ce45f159ea230615615992c2cbf719eb36636b0ce77e2e5b8767d0e3ab28376b3adb28025712308712206b5724cb45088110182d681bc61ddec6bde25825c28260429180717fdf5083ae1e9233a5c7ff949d2dd809217005ae3e7ec000154e51489ad373918a6295c7c1055d7544c495c253d4b2a77ddffa04606854362fff4fb969812315befc2fb8bc9e998da870e3313575914f670a64babdbf5f6e844dddf2022e13d22c7971d3d1529fefcd0b1140426688f93f8bbf7440af748c2b0b6f7cafa20b9889353c439736af444cd613844fd31d1cc8273e7cb27e8bb7b2609efdc172e0f62342c79b313211408ff26c43b0817346fab5422b4d9c03ca732bdf5bb0915c8a8ca008f1fa83fc0c51f3c799dff52a82e9ec744c9cfc5cfce2dab136951cc0f88e345f0168a790a8e953f2f72f32062da8d608989ca51b130dd40361fb2ef6b547f30364a0135522e2c7827383eb5314383c47fc31b70341d667e9a26cb117e0cf4a918360744075a60890dec5ed839b884d852d4a3f7fcebc70c93649756330ab1f9c6087a60d83d260e20d91aa53ee9cbeebdeb5b5b1dcddacafb378171686f75a6e7522a4786962beb9682f724e108511641a9e90f27080504188b6b11a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xfc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4a, 0x5, "2a65f804d67f14c593d4991372c668bd621a1980ac73afed433b4441fd51c7253af47853476db3515c732dbaae2824b402507670e027457e0e5f715ef1d58aa97c18d189af2e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xad}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.:[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffe00}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1800000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, '{^)^[v(\\}\'&[\']\'-&(*$\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}]}]}, 0x11ec}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000001) (async, rerun: 32)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:38:12 executing program 2:
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0xde, 0x0, 0x3f}, 0x10)
socketpair(0x1e, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={0x0}}, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000100)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xffffffff}) (async)
socket(0x29, 0x5, 0x9) (async)
r2 = socket(0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, 0x0) (async)
accept4$phonet_pipe(r2, 0x0, 0x0, 0x800) (async)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) (async)
socket(0x0, 0x0, 0x0) (async)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) (async)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000003c0))
accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) (async)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x93f4, 0x0, 0x0, 0x66}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (async)
accept4$phonet_pipe(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x1c0800) (async)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:38:12 executing program 5:
socketpair(0x10, 0x80000, 0x1ff, &(0x7f0000000000))
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)

03:38:12 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 45)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:12 executing program 5:
socketpair(0x10, 0x80000, 0x1ff, &(0x7f0000000000)) (async)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)

03:38:12 executing program 0:
ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000080)=0x8)
r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x1400)

03:38:12 executing program 2:
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)

03:38:12 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 39)

03:38:12 executing program 1:
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r0 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180))
setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0)
connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x7, 0x20, 0x3}, 0x10)
r1 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180))
setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000040), 0x4)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) (async)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180)) (async)
setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async)
connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x7, 0x20, 0x3}, 0x10) (async)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180)) (async)
setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) (async)
setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000040), 0x4) (async)

03:38:12 executing program 5:
socketpair(0x10, 0x80000, 0x1ff, &(0x7f0000000000))
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
socketpair(0x10, 0x80000, 0x1ff, &(0x7f0000000000)) (async)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) (async)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0) (async)

03:38:12 executing program 0:
ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000080)=0x8) (async)
r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x1400)

03:38:12 executing program 2:
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000000)) (async)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (async)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async)

03:38:12 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 46)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:12 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'sit0\x00', <r3=>0x0, 0x2f, 0x1, 0x40, 0x80000001, 0x54, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, 0x700, 0x1}})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@private0, <r4=>0x0}, &(0x7f00000001c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', <r5=>0x0, 0x8cf8446006e59456, 0x3f, 0x7f, 0x1, 0x6, @remote, @loopback, 0x8000, 0x7800, 0x7c9922f5, 0x3}})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000400}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x13c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

03:38:12 executing program 0:
ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000080)=0x8) (async)
r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x1400)

03:38:12 executing program 1:
socketpair(0x2c, 0x8080d, 0x4, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', <r1=>0x0, 0x4, 0x30, 0x5, 0xff, 0x14, @dev={0xfe, 0x80, '\x00', 0x19}, @remote, 0x700, 0x48, 0x4, 0x7}})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, @private2, @mcast1, 0x3, 0xee, 0x7f, 0x400, 0x4, 0x40100, r1})
socketpair(0x1e, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={0x0}}, 0x0)
ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f00000002c0))
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0xf, 0x800, 0x2)
r4 = accept4$phonet_pipe(r2, 0x0, &(0x7f0000000300), 0x80000)
setsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, &(0x7f0000000340)=0x1, 0x4)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', r1, 0x29, 0x5, 0x9, 0xffffffff, 0x2b, @remote, @loopback, 0x700, 0x8, 0x5, 0x8}})

03:38:12 executing program 1:
socketpair(0x2c, 0x8080d, 0x4, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', <r1=>0x0, 0x4, 0x30, 0x5, 0xff, 0x14, @dev={0xfe, 0x80, '\x00', 0x19}, @remote, 0x700, 0x48, 0x4, 0x7}})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, @private2, @mcast1, 0x3, 0xee, 0x7f, 0x400, 0x4, 0x40100, r1})
socketpair(0x1e, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={0x0}}, 0x0)
ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f00000002c0))
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0xf, 0x800, 0x2)
r4 = accept4$phonet_pipe(r2, 0x0, &(0x7f0000000300), 0x80000)
setsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, &(0x7f0000000340)=0x1, 0x4)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', r1, 0x29, 0x5, 0x9, 0xffffffff, 0x2b, @remote, @loopback, 0x700, 0x8, 0x5, 0x8}})
socketpair(0x2c, 0x8080d, 0x4, &(0x7f0000000000)) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x30, 0x5, 0xff, 0x14, @dev={0xfe, 0x80, '\x00', 0x19}, @remote, 0x700, 0x48, 0x4, 0x7}}) (async)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, @private2, @mcast1, 0x3, 0xee, 0x7f, 0x400, 0x4, 0x40100, r1}) (async)
socketpair(0x1e, 0x2, 0x0, &(0x7f00000001c0)) (async)
sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={0x0}}, 0x0) (async)
ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f00000002c0)) (async)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) (async)
socket(0xf, 0x800, 0x2) (async)
accept4$phonet_pipe(r2, 0x0, &(0x7f0000000300), 0x80000) (async)
setsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, &(0x7f0000000340)=0x1, 0x4) (async)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', r1, 0x29, 0x5, 0x9, 0xffffffff, 0x2b, @remote, @loopback, 0x700, 0x8, 0x5, 0x8}}) (async)

03:38:12 executing program 2:
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)

03:38:12 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 40)

03:38:12 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'sit0\x00', <r3=>0x0, 0x2f, 0x1, 0x40, 0x80000001, 0x54, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, 0x700, 0x1}})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@private0, <r4=>0x0}, &(0x7f00000001c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', <r5=>0x0, 0x8cf8446006e59456, 0x3f, 0x7f, 0x1, 0x6, @remote, @loopback, 0x8000, 0x7800, 0x7c9922f5, 0x3}})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000400}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x13c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f80)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x2f, 0x1, 0x40, 0x80000001, 0x54, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, 0x700, 0x1}}) (async)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@private0}, &(0x7f00000001c0)=0x14) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x8cf8446006e59456, 0x3f, 0x7f, 0x1, 0x6, @remote, @loopback, 0x8000, 0x7800, 0x7c9922f5, 0x3}}) (async)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000400}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x13c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)

03:38:13 executing program 0:
r0 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180))
setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(r0, 0x0, 0x0, 0x100800)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000002c0)={@my=0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000))

03:38:13 executing program 1:
socketpair(0x2c, 0x8080d, 0x4, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async, rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', <r1=>0x0, 0x4, 0x30, 0x5, 0xff, 0x14, @dev={0xfe, 0x80, '\x00', 0x19}, @remote, 0x700, 0x48, 0x4, 0x7}}) (rerun: 64)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, @private2, @mcast1, 0x3, 0xee, 0x7f, 0x400, 0x4, 0x40100, r1}) (async, rerun: 64)
socketpair(0x1e, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff}) (rerun: 64)
sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={0x0}}, 0x0) (async)
ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f00000002c0)) (async, rerun: 64)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
r3 = socket(0xf, 0x800, 0x2)
r4 = accept4$phonet_pipe(r2, 0x0, &(0x7f0000000300), 0x80000)
setsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, &(0x7f0000000340)=0x1, 0x4)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', r1, 0x29, 0x5, 0x9, 0xffffffff, 0x2b, @remote, @loopback, 0x700, 0x8, 0x5, 0x8}})

03:38:13 executing program 2:
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x4be9, 0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000a, 0x10, r0, 0x10000000)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x19}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "5b29540f3681dc9492a87bd9e310a1a8"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x24018000)
syz_io_uring_setup(0x0, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0)

03:38:13 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 47)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:13 executing program 0:
r0 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180))
setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async)
accept4$phonet_pipe(r0, 0x0, 0x0, 0x100800)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000002c0)={@my=0x0}) (async)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000))

03:38:13 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'sit0\x00', <r3=>0x0, 0x2f, 0x1, 0x40, 0x80000001, 0x54, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, 0x700, 0x1}}) (async)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@private0, <r4=>0x0}, &(0x7f00000001c0)=0x14) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', <r5=>0x0, 0x8cf8446006e59456, 0x3f, 0x7f, 0x1, 0x6, @remote, @loopback, 0x8000, 0x7800, 0x7c9922f5, 0x3}})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000400}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x13c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

03:38:13 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 41)

03:38:13 executing program 2:
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x4be9, 0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000a, 0x10, r0, 0x10000000)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x19}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "5b29540f3681dc9492a87bd9e310a1a8"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x24018000)
syz_io_uring_setup(0x0, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x4be9, 0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (async)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000a, 0x10, r0, 0x10000000) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000f80)={'vcan0\x00'}) (async)
sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x19}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "5b29540f3681dc9492a87bd9e310a1a8"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x24018000) (async)
syz_io_uring_setup(0x0, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (async)
io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async)

03:38:13 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)

03:38:13 executing program 0:
r0 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180))
setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(r0, 0x0, 0x0, 0x100800)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000002c0)={@my=0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000))
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180)) (async)
setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) (async)
accept4$phonet_pipe(r0, 0x0, 0x0, 0x100800) (async)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000002c0)={@my=0x0}) (async)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)) (async)

03:38:13 executing program 1:
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0xaeb2, 0x1)
accept$phonet_pipe(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10)
socketpair(0x28, 0x4, 0x6, &(0x7f0000000140))
socketpair(0x9, 0x6, 0x10000, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$phonet_pipe(r1, 0x0, 0xdc1fb99c9811cbee)
getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4)

03:38:13 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)

03:38:13 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 48)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:13 executing program 2:
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740)={0x0, 0x4be9, 0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000a, 0x10, r0, 0x10000000) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000f80)={'vcan0\x00'}) (async)
sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x19}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "5b29540f3681dc9492a87bd9e310a1a8"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x24018000) (async)
syz_io_uring_setup(0x0, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (async)
io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0)

03:38:13 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:38:13 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 42)

03:38:13 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)

03:38:13 executing program 1:
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0xaeb2, 0x1)
accept$phonet_pipe(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) (async, rerun: 32)
socketpair(0x28, 0x4, 0x6, &(0x7f0000000140)) (rerun: 32)
socketpair(0x9, 0x6, 0x10000, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$phonet_pipe(r1, 0x0, 0xdc1fb99c9811cbee) (async, rerun: 64)
getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) (rerun: 64)

03:38:13 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)

03:38:13 executing program 2:
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f0000000040)=""/117, 0x75}, {&(0x7f00000000c0)=""/174, 0xae}, {&(0x7f0000000180)=""/183, 0xb7}, {&(0x7f0000000240)=""/134, 0x86}, {&(0x7f0000000300)=""/16, 0x10}, {&(0x7f0000000340)=""/16, 0x10}], 0x7)

03:38:13 executing program 5:
eventfd2(0x3, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', <r1=>0x0})
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000080)={0x468, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PEERS={0x3b4, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x3a4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2ec, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x800}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e49699c9880b825b5595c8866dac22ca406aa4ecdc7a6d3cb8b7fcb94716f2d5"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x468}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'})

03:38:14 executing program 1:
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0xaeb2, 0x1)
accept$phonet_pipe(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10)
socketpair(0x28, 0x4, 0x6, &(0x7f0000000140))
socketpair(0x9, 0x6, 0x10000, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$phonet_pipe(r1, 0x0, 0xdc1fb99c9811cbee)
getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4)
syz_open_dev$mouse(&(0x7f0000000000), 0xaeb2, 0x1) (async)
accept$phonet_pipe(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) (async)
socketpair(0x28, 0x4, 0x6, &(0x7f0000000140)) (async)
socketpair(0x9, 0x6, 0x10000, &(0x7f0000000180)) (async)
connect$phonet_pipe(r1, 0x0, 0xdc1fb99c9811cbee) (async)
getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async)

03:38:14 executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)

03:38:14 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 49)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:14 executing program 2:
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f0000000040)=""/117, 0x75}, {&(0x7f00000000c0)=""/174, 0xae}, {&(0x7f0000000180)=""/183, 0xb7}, {&(0x7f0000000240)=""/134, 0x86}, {&(0x7f0000000300)=""/16, 0x10}, {&(0x7f0000000340)=""/16, 0x10}], 0x7)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f0000000040)=""/117, 0x75}, {&(0x7f00000000c0)=""/174, 0xae}, {&(0x7f0000000180)=""/183, 0xb7}, {&(0x7f0000000240)=""/134, 0x86}, {&(0x7f0000000300)=""/16, 0x10}, {&(0x7f0000000340)=""/16, 0x10}], 0x7) (async)

03:38:14 executing program 5:
eventfd2(0x3, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', <r1=>0x0})
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000080)={0x468, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PEERS={0x3b4, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x3a4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2ec, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x800}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e49699c9880b825b5595c8866dac22ca406aa4ecdc7a6d3cb8b7fcb94716f2d5"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x468}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'})
eventfd2(0x3, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f80)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00'}) (async)
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000080)={0x468, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PEERS={0x3b4, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x3a4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2ec, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x800}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e49699c9880b825b5595c8866dac22ca406aa4ecdc7a6d3cb8b7fcb94716f2d5"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x468}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'}) (async)

03:38:14 executing program 0:
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="14010059e771d4e7008b8d1b0a60d176ac38bd37b97f2fa04829234328feebbf57ea1ee4c9f6fe1450019f98e1ea1e2e4e96884149b3a7ca51115563e247af4e33ba3de7e4b3220c112f6d52e3d0b6e45e29f29ef9f8ada46c3a4d02b6474710733722266b11b7e79664736b71aad3cb9f6c645ea0e1d719a795237634b269f5c15c57985d4f0d4076cd3d1b8db4122a4ada99da7da4687920999387404ba98b4819abd45e42653f287b166b6406af81bd4c", @ANYRES16=0x0, @ANYBLOB="080028bd7000fcdbdf2508000000a00002800800020001000000080002000000000089000500be6b842b755827794ea3c7a70895a4bcbd2ff35de7704697e193206f63a065b184d092236f895271bc1cae4b71e22459eb015e6ab39b1bc51401a9930e297441bae876267c77170000cc9139f77c10455932c442a1e864ce9e98a4ee9c201a95ad46236dab975285fac752382e6e631a9d84aac3ad91cd41dcc0f29f99e61ca902e9772c4a0000000c00018008000300020000005400018008000300020000000800030003000000140002007465616d5f736c6176655f3100000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="14000200697036677265300000000000000000000800030000000000"], 0x114}, 0x1, 0x0, 0x0, 0x20008014}, 0x4000044)

03:38:14 executing program 2:
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f0000000040)=""/117, 0x75}, {&(0x7f00000000c0)=""/174, 0xae}, {&(0x7f0000000180)=""/183, 0xb7}, {&(0x7f0000000240)=""/134, 0x86}, {&(0x7f0000000300)=""/16, 0x10}, {&(0x7f0000000340)=""/16, 0x10}], 0x7)

03:38:14 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 43)

03:38:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000900), r1)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001c80)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001c40)={&(0x7f0000001400)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r3=>0x0})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=<r4=>0x0, &(0x7f00000000c0)=0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', <r5=>0x0, 0x29, 0x0, 0x5c, 0x3, 0x1, @remote, @mcast2, 0x1, 0x20, 0x8, 0x1}})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000240)={0x654, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x17c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xa270, 0x7f, 0x40, 0x4}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x9, 0x0, 0x5, 0x3}, {0x1, 0xd7, 0x1f, 0x5}, {0x9, 0xef, 0x7, 0xff}, {0x0, 0x5, 0x3f, 0x1}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x1cc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x8, 0x5, 0x6, 0x9}, {0xfff8, 0x0, 0x8, 0xfa0}, {0x8000, 0x8, 0x5, 0x4}, {0x3, 0x5, 0x1, 0x5}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8000, 0x4, 0x80, 0x200}, {0x6d7, 0xff, 0x8, 0x4000003}, {0x0, 0x2, 0x7f, 0x3}]}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}]}}]}, 0x654}, 0x1, 0x0, 0x0, 0x80}, 0x90)

03:38:14 executing program 5:
eventfd2(0x3, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f80)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', <r1=>0x0})
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000080)={0x468, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PEERS={0x3b4, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x3a4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2ec, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x800}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e49699c9880b825b5595c8866dac22ca406aa4ecdc7a6d3cb8b7fcb94716f2d5"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x468}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'})

03:38:14 executing program 0:
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="14010059e771d4e7008b8d1b0a60d176ac38bd37b97f2fa04829234328feebbf57ea1ee4c9f6fe1450019f98e1ea1e2e4e96884149b3a7ca51115563e247af4e33ba3de7e4b3220c112f6d52e3d0b6e45e29f29ef9f8ada46c3a4d02b6474710733722266b11b7e79664736b71aad3cb9f6c645ea0e1d719a795237634b269f5c15c57985d4f0d4076cd3d1b8db4122a4ada99da7da4687920999387404ba98b4819abd45e42653f287b166b6406af81bd4c", @ANYRES16=0x0, @ANYBLOB="080028bd7000fcdbdf2508000000a00002800800020001000000080002000000000089000500be6b842b755827794ea3c7a70895a4bcbd2ff35de7704697e193206f63a065b184d092236f895271bc1cae4b71e22459eb015e6ab39b1bc51401a9930e297441bae876267c77170000cc9139f77c10455932c442a1e864ce9e98a4ee9c201a95ad46236dab975285fac752382e6e631a9d84aac3ad91cd41dcc0f29f99e61ca902e9772c4a0000000c00018008000300020000005400018008000300020000000800030003000000140002007465616d5f736c6176655f3100000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="14000200697036677265300000000000000000000800030000000000"], 0x114}, 0x1, 0x0, 0x0, 0x20008014}, 0x4000044)

03:38:14 executing program 2:
socketpair(0x11, 0x800, 0x80, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r1=>0x0})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@empty, <r2=>0x0}, &(0x7f0000000100)=0x14)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x130, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x8100}, 0x40000)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:38:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000900), r1)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001c80)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001c40)={&(0x7f0000001400)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r3=>0x0})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=<r4=>0x0, &(0x7f00000000c0)=0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', <r5=>0x0, 0x29, 0x0, 0x5c, 0x3, 0x1, @remote, @mcast2, 0x1, 0x20, 0x8, 0x1}})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000240)={0x654, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x17c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xa270, 0x7f, 0x40, 0x4}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x9, 0x0, 0x5, 0x3}, {0x1, 0xd7, 0x1f, 0x5}, {0x9, 0xef, 0x7, 0xff}, {0x0, 0x5, 0x3f, 0x1}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x1cc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x8, 0x5, 0x6, 0x9}, {0xfff8, 0x0, 0x8, 0xfa0}, {0x8000, 0x8, 0x5, 0x4}, {0x3, 0x5, 0x1, 0x5}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8000, 0x4, 0x80, 0x200}, {0x6d7, 0xff, 0x8, 0x4000003}, {0x0, 0x2, 0x7f, 0x3}]}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}]}}]}, 0x654}, 0x1, 0x0, 0x0, 0x80}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f80)={'vcan0\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$team(&(0x7f0000000900), r1) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001c80)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001c40)={&(0x7f0000001400)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x5c, 0x3, 0x1, @remote, @mcast2, 0x1, 0x20, 0x8, 0x1}}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) (async)
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000240)={0x654, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x17c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xa270, 0x7f, 0x40, 0x4}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x9, 0x0, 0x5, 0x3}, {0x1, 0xd7, 0x1f, 0x5}, {0x9, 0xef, 0x7, 0xff}, {0x0, 0x5, 0x3f, 0x1}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x1cc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x8, 0x5, 0x6, 0x9}, {0xfff8, 0x0, 0x8, 0xfa0}, {0x8000, 0x8, 0x5, 0x4}, {0x3, 0x5, 0x1, 0x5}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8000, 0x4, 0x80, 0x200}, {0x6d7, 0xff, 0x8, 0x4000003}, {0x0, 0x2, 0x7f, 0x3}]}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}]}}]}, 0x654}, 0x1, 0x0, 0x0, 0x80}, 0x90) (async)

03:38:14 executing program 4:
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x8000)
r0 = syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 50)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000840), 0x1)

03:38:14 executing program 5:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x8800)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x7ffffd)

03:38:14 executing program 0:
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="14010059e771d4e7008b8d1b0a60d176ac38bd37b97f2fa04829234328feebbf57ea1ee4c9f6fe1450019f98e1ea1e2e4e96884149b3a7ca51115563e247af4e33ba3de7e4b3220c112f6d52e3d0b6e45e29f29ef9f8ada46c3a4d02b6474710733722266b11b7e79664736b71aad3cb9f6c645ea0e1d719a795237634b269f5c15c57985d4f0d4076cd3d1b8db4122a4ada99da7da4687920999387404ba98b4819abd45e42653f287b166b6406af81bd4c", @ANYRES16=0x0, @ANYBLOB="080028bd7000fcdbdf2508000000a00002800800020001000000080002000000000089000500be6b842b755827794ea3c7a70895a4bcbd2ff35de7704697e193206f63a065b184d092236f895271bc1cae4b71e22459eb015e6ab39b1bc51401a9930e297441bae876267c77170000cc9139f77c10455932c442a1e864ce9e98a4ee9c201a95ad46236dab975285fac752382e6e631a9d84aac3ad91cd41dcc0f29f99e61ca902e9772c4a0000000c00018008000300020000005400018008000300020000000800030003000000140002007465616d5f736c6176655f3100000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="14000200697036677265300000000000000000000800030000000000"], 0x114}, 0x1, 0x0, 0x0, 0x20008014}, 0x4000044)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="14010059e771d4e7008b8d1b0a60d176ac38bd37b97f2fa04829234328feebbf57ea1ee4c9f6fe1450019f98e1ea1e2e4e96884149b3a7ca51115563e247af4e33ba3de7e4b3220c112f6d52e3d0b6e45e29f29ef9f8ada46c3a4d02b6474710733722266b11b7e79664736b71aad3cb9f6c645ea0e1d719a795237634b269f5c15c57985d4f0d4076cd3d1b8db4122a4ada99da7da4687920999387404ba98b4819abd45e42653f287b166b6406af81bd4c", @ANYRES16=0x0, @ANYBLOB="080028bd7000fcdbdf2508000000a00002800800020001000000080002000000000089000500be6b842b755827794ea3c7a70895a4bcbd2ff35de7704697e193206f63a065b184d092236f895271bc1cae4b71e22459eb015e6ab39b1bc51401a9930e297441bae876267c77170000cc9139f77c10455932c442a1e864ce9e98a4ee9c201a95ad46236dab975285fac752382e6e631a9d84aac3ad91cd41dcc0f29f99e61ca902e9772c4a0000000c00018008000300020000005400018008000300020000000800030003000000140002007465616d5f736c6176655f3100000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="14000200697036677265300000000000000000000800030000000000"], 0x114}, 0x1, 0x0, 0x0, 0x20008014}, 0x4000044) (async)

03:38:14 executing program 2:
socketpair(0x11, 0x800, 0x80, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r1=>0x0}) (async)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@empty, <r2=>0x0}, &(0x7f0000000100)=0x14)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x130, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x8100}, 0x40000) (async)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)

03:38:14 executing program 3:
r0 = socket(0x0, 0x1, 0x0)
accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = socket(0x0, 0x0, 0x8000)
getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0)
r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580))
accept4$phonet_pipe(r2, 0x0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
syz_io_uring_setup(0x26e3, &(0x7f0000000740), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) (fail_nth: 44)

03:38:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f80)={'vcan0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000900), r1)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001c80)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001c40)={&(0x7f0000001400)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r3=>0x0})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=<r4=>0x0, &(0x7f00000000c0)=0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', <r5=>0x0, 0x29, 0x0, 0x5c, 0x3, 0x1, @remote, @mcast2, 0x1, 0x20, 0x8, 0x1}})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000240)={0x654, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x17c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xa270, 0x7f, 0x40, 0x4}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x9, 0x0, 0x5, 0x3}, {0x1, 0xd7, 0x1f, 0x5}, {0x9, 0xef, 0x7, 0xff}, {0x0, 0x5, 0x3f, 0x1}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x1cc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x8, 0x5, 0x6, 0x9}, {0xfff8, 0x0, 0x8, 0xfa0}, {0x8000, 0x8, 0x5, 0x4}, {0x3, 0x5, 0x1, 0x5}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8000, 0x4, 0x80, 0x200}, {0x6d7, 0xff, 0x8, 0x4000003}, {0x0, 0x2, 0x7f, 0x3}]}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}]}}]}, 0x654}, 0x1, 0x0, 0x0, 0x80}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f80)={'vcan0\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$team(&(0x7f0000000900), r1) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001c80)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001c40)={&(0x7f0000001400)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x5c, 0x3, 0x1, @remote, @mcast2, 0x1, 0x20, 0x8, 0x1}}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) (async)
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000240)={0x654, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x17c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xa270, 0x7f, 0x40, 0x4}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x9, 0x0, 0x5, 0x3}, {0x1, 0xd7, 0x1f, 0x5}, {0x9, 0xef, 0x7, 0xff}, {0x0, 0x5, 0x3f, 0x1}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x1cc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x8, 0x5, 0x6, 0x9}, {0xfff8, 0x0, 0x8, 0xfa0}, {0x8000, 0x8, 0x5, 0x4}, {0x3, 0x5, 0x1, 0x5}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8000, 0x4, 0x80, 0x200}, {0x6d7, 0xff, 0x8, 0x4000003}, {0x0, 0x2, 0x7f, 0x3}]}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}]}}]}, 0x654}, 0x1, 0x0, 0x0, 0x80}, 0x90) (async)

[  327.335101][T23211] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  327.346877][T23211] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  327.355308][T23211] CPU: 0 PID: 23211 Comm: syz-executor.4 Not tainted 5.18.0-rc6-next-20220516-syzkaller #0
[  327.365318][T23211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  327.375390][T23211] RIP: 0010:__rb_erase_color+0x2fd/0xdb0
[  327.381103][T23211] Code: 00 4d 89 ec 4d 8b 6d 10 e9 ac fd ff ff 4c 89 60 10 eb be 4c 89 e9 48 89 e8 4c 89 6d 10 48 c1 e9 03 49 89 6c 24 08 48 83 c8 01 <80> 3c 19 00 0f 85 1d 08 00 00 49 89 45 00 48 89 e8 48 c1 e8 03 80
[  327.400737][T23211] RSP: 0018:ffffc9000a307a48 EFLAGS: 00010286
[  327.406824][T23211] RAX: ffff8880201b2611 RBX: dffffc0000000000 RCX: 0000000000000000
[  327.414818][T23211] RDX: ffffed1028d5c38f RSI: ffff888146ae1c78 RDI: ffff88801f5e8390
[  327.422815][T23211] RBP: ffff8880201b2610 R08: ffff8880201b2620 R09: ffff888146ae1c6f
[  327.430808][T23211] R10: ffffffff81b026c8 R11: 0000000000000001 R12: ffff88801f5e8388
[  327.438798][T23211] R13: 0000000000000000 R14: ffff888146ae1c78 R15: ffffffff81b014b0
[  327.446791][T23211] FS:  0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
[  327.455760][T23211] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  327.462364][T23211] CR2: 0000000000000000 CR3: 0000000079d80000 CR4: 00000000003506f0
[  327.470361][T23211] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
03:38:14 executing program 0:
openat$capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x620001, 0x0)

[  327.478352][T23211] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  327.486341][T23211] Call Trace:
[  327.489635][T23211]  <TASK>
[  327.492583][T23211]  vma_interval_tree_remove+0x694/0xed0
[  327.498287][T23211]  unlink_file_vma+0xbd/0x110
[  327.503050][T23211]  free_pgtables+0x255/0x420
[  327.507676][T23211]  ? free_pgd_range+0xbf0/0xbf0
[  327.512567][T23211]  exit_mmap+0x1ff/0x740
[  327.516839][T23211]  ? __ia32_sys_remap_file_pages+0x150/0x150
[  327.522864][T23211]  __mmput+0x128/0x4c0
[  327.527034][T23211]  mmput+0x5c/0x70
[  327.530783][T23211]  do_exit+0xa18/0x2a00
[  327.535036][T23211]  ? preempt_schedule_thunk+0x16/0x18
[  327.540467][T23211]  ? mm_update_next_owner+0x7b0/0x7b0
[  327.545847][T23211]  ? preempt_schedule_thunk+0x16/0x18
[  327.551219][T23211]  ? trace_hardirqs_on+0x38/0x1c0
[  327.556298][T23211]  do_group_exit+0xd2/0x2f0
[  327.560834][T23211]  __x64_sys_exit_group+0x3a/0x50
[  327.565859][T23211]  do_syscall_64+0x35/0xb0
[  327.570277][T23211]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
[  327.576162][T23211] RIP: 0033:0x7f624ee890e9
[  327.580576][T23211] Code: Unable to access opcode bytes at RIP 0x7f624ee890bf.
[  327.587930][T23211] RSP: 002b:00007f6250086af8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  327.596336][T23211] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f624ee890e9
[  327.604315][T23211] RDX: 00007f624ee89132 RSI: 0000000000000000 RDI: 000000000000000b
[  327.612321][T23211] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000
[  327.620291][T23211] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000020000800
[  327.628260][T23211] R13: 0000000020ffb000 R14: 00000000200007c0 R15: 0000000020ff9000
[  327.636280][T23211]  </TASK>
[  327.639289][T23211] Modules linked in:
[  327.645986][T23211] ---[ end trace 0000000000000000 ]---
[  327.645999][T23211] RIP: 0010:__rb_erase_color+0x2fd/0xdb0
[  327.646042][T23211] Code: 00 4d 89 ec 4d 8b 6d 10 e9 ac fd ff ff 4c 89 60 10 eb be 4c 89 e9 48 89 e8 4c 89 6d 10 48 c1 e9 03 49 89 6c 24 08 48 83 c8 01 <80> 3c 19 00 0f 85 1d 08 00 00 49 89 45 00 48 89 e8 48 c1 e8 03 80
[  327.646063][T23211] RSP: 0018:ffffc9000a307a48 EFLAGS: 00010286
[  327.646081][T23211] RAX: ffff8880201b2611 RBX: dffffc0000000000 RCX: 0000000000000000
[  327.646097][T23211] RDX: ffffed1028d5c38f RSI: ffff888146ae1c78 RDI: ffff88801f5e8390
[  327.646113][T23211] RBP: ffff8880201b2610 R08: ffff8880201b2620 R09: ffff888146ae1c6f
[  327.646129][T23211] R10: ffffffff81b026c8 R11: 0000000000000001 R12: ffff88801f5e8388
[  327.646144][T23211] R13: 0000000000000000 R14: ffff888146ae1c78 R15: ffffffff81b014b0
[  327.646160][T23211] FS:  0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
[  327.646184][T23211] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  327.646200][T23211] CR2: 0000000000000000 CR3: 0000000079d80000 CR4: 00000000003506f0
[  327.646215][T23211] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  327.646227][T23211] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  327.646242][T23211] Kernel panic - not syncing: Fatal exception
[  327.768400][T23211] Kernel Offset: disabled
[  327.772724][T23211] Rebooting in 86400 seconds..