x8, 0x1, r3}, @GTPA_FLOW={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x20042814)

09:02:00 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)
bind$bt_sco(r0, &(0x7f0000000000), 0x8)

09:02:00 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r1)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4)
sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)

09:02:00 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000000), 0x8)

09:02:01 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r1) (async)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async)
sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)

09:02:01 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0))
connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x5)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
socketpair(0x1e, 0xa, 0xce, &(0x7f0000000180))
connect$bt_sco(r1, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
connect$bt_sco(r0, &(0x7f0000000080), 0x8)

09:02:01 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)

09:02:01 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f00000000c0), 0x4)
socket$igmp6(0xa, 0x3, 0x2)
syz_io_uring_setup(0x1474, &(0x7f0000000000)={0x0, 0x0, 0x200, 0xfffffffd}, 0x0, 0x0)
r1 = socket(0x29, 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r1)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0)
r2 = socket(0x25, 0x1, 0x0)
ioctl$sock_bt_hci(r2, 0x0, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000080), 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)

09:02:01 executing program 0:
pselect6(0x0, 0x0, &(0x7f0000000140)={0x6, 0x1, 0x2, 0x0, 0x6, 0x3f, 0x1ff, 0x284}, &(0x7f0000000180)={0x6, 0x0, 0x1ff, 0x7, 0x8, 0x10000, 0x8, 0x258}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8})

09:02:02 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000000), 0x8)

09:02:02 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0))
connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x5)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
socketpair(0x1e, 0xa, 0xce, &(0x7f0000000180))
connect$bt_sco(r1, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
connect$bt_sco(r0, &(0x7f0000000080), 0x8)

09:02:02 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000140)=0x1, 0x4)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = syz_io_uring_setup(0x100047e8, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0))
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
connect$bt_sco(r3, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2)
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2)
r4 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff)
connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @none}, 0x8)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3)

09:02:02 executing program 0:
socket$igmp6(0xa, 0x3, 0x2) (async)
r0 = socket$igmp6(0xa, 0x3, 0x2)
socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f00000000c0), 0x4) (async)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f00000000c0), 0x4)
socket$igmp6(0xa, 0x3, 0x2) (async)
socket$igmp6(0xa, 0x3, 0x2)
syz_io_uring_setup(0x1474, &(0x7f0000000000)={0x0, 0x0, 0x200, 0xfffffffd}, 0x0, 0x0)
r1 = socket(0x29, 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r1)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0)
r2 = socket(0x25, 0x1, 0x0)
ioctl$sock_bt_hci(r2, 0x0, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000080), 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)

[  982.889869][ T5213] Bluetooth: hci3: command 0x041b tx timeout
09:02:03 executing program 2:
pselect6(0x40, &(0x7f0000000100)={0x0, 0x81, 0x9, 0x7, 0x7fffffffffffffff, 0x9, 0xffffffffffff0001, 0x5}, &(0x7f0000000140)={0x6, 0x1, 0x2, 0x0, 0x6, 0x3f, 0x1ff, 0x284}, &(0x7f0000000180)={0x6, 0x0, 0x1ff, 0x7, 0x8, 0x10000, 0x8, 0x258}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8})

09:02:03 executing program 3:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=0x4)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {0xee00, 0xee00}}, './file0\x00'})
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000140)=""/132, &(0x7f0000000200)=0x84) (async)
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000140)=""/132, &(0x7f0000000200)=0x84)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x8001, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48)

09:02:03 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0))
connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x5)

09:02:03 executing program 3:
pselect6(0x40, &(0x7f0000000100)={0x0, 0x81, 0x9, 0x7, 0x7fffffffffffffff, 0x9, 0xffffffffffff0001, 0x5}, &(0x7f0000000140)={0x6, 0x1, 0x2, 0x0, 0x6, 0x3f, 0x1ff, 0x284}, &(0x7f0000000180)={0x6, 0x0, 0x1ff, 0x7, 0x8, 0x10000, 0x8, 0x258}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8})

09:02:03 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000100)=""/20, &(0x7f0000000140)=0x14)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r2, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r3, 0x1, 0x0, 0x0, {{0x2}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x400, 0x70bd25, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x16, 0xffffffff, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40090}, 0x8044)
connect$bt_sco(r2, &(0x7f0000000080), 0x8)

09:02:03 executing program 1:
pselect6(0x40, &(0x7f0000000100)={0x0, 0x81, 0x9, 0x7, 0x7fffffffffffffff, 0x9, 0xffffffffffff0001, 0x5}, &(0x7f0000000140)={0x6, 0x1, 0x2, 0x0, 0x6, 0x3f, 0x1ff, 0x284}, &(0x7f0000000180)={0x6, 0x0, 0x1ff, 0x7, 0x8, 0x10000, 0x8, 0x258}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8})

09:02:03 executing program 3:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000140)=0x1, 0x4)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = syz_io_uring_setup(0x100047e8, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0))
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
connect$bt_sco(r3, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2)
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2)
r4 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff)
connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @none}, 0x8)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3)
socket$igmp6(0xa, 0x3, 0x2) (async)
setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000140)=0x1, 0x4) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
syz_io_uring_setup(0x100047e8, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) (async)
connect$bt_sco(r3, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async)
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) (async)
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) (async)
epoll_create(0x4) (async)
epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) (async)
connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @none}, 0x8) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) (async)

09:02:03 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000100)=""/20, &(0x7f0000000140)=0x14) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async, rerun: 64)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64)
connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) (async, rerun: 32)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32)
bind$bt_sco(r2, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r3, 0x1, 0x0, 0x0, {{0x2}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x400, 0x70bd25, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x16, 0xffffffff, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40090}, 0x8044)
connect$bt_sco(r2, &(0x7f0000000080), 0x8)

09:02:03 executing program 3:
pselect6(0x40, &(0x7f0000000100)={0x7, 0x0, 0x9, 0x7, 0x7fffffffffffffff, 0x9, 0xffffffffffff0001, 0x5}, &(0x7f0000000140)={0x6, 0x1, 0x2, 0x0, 0x6, 0x3f, 0x1ff, 0x284}, &(0x7f0000000180)={0x6, 0x0, 0x1ff, 0x7, 0x8, 0x10000, 0x8, 0x258}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8})

09:02:03 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)

09:02:03 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000000))
bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8)

09:02:03 executing program 0:
pselect6(0x40, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x7, 0x7fffffffffffffff, 0x9, 0xffffffffffff0001, 0x5}, &(0x7f0000000140)={0x6, 0x1, 0x2, 0x0, 0x6, 0x3f, 0x1ff, 0x284}, &(0x7f0000000180)={0x6, 0x0, 0x1ff, 0x7, 0x8, 0x10000, 0x8, 0x258}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8})

09:02:03 executing program 3:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$MRT6(r1, 0x29, 0xcf, &(0x7f0000000000), &(0x7f0000000080)=0x10)

09:02:03 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000000)) (async)
bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8)

09:02:03 executing program 3:
pselect6(0x40, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x9, 0xffffffffffff0001, 0x5}, &(0x7f0000000140)={0x6, 0x1, 0x2, 0x0, 0x6, 0x3f, 0x1ff, 0x284}, &(0x7f0000000180)={0x6, 0x0, 0x1ff, 0x7, 0x8, 0x10000, 0x8, 0x258}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8})

09:02:03 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)
r1 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$MRT6(r1, 0x29, 0xcf, &(0x7f0000000000), &(0x7f0000000080)=0x10)

09:02:03 executing program 3:
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:03 executing program 0:
pselect6(0x40, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffff0001, 0x5}, &(0x7f0000000140)={0x6, 0x1, 0x2, 0x0, 0x6, 0x3f, 0x1ff, 0x284}, &(0x7f0000000180)={0x6, 0x0, 0x1ff, 0x7, 0x8, 0x10000, 0x8, 0x258}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8})

09:02:03 executing program 3:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x4e23, 0x1, @mcast1}, 0xffffffffffffffff, {[0xe02, 0x7ff, 0xfa3, 0x223c, 0x101, 0x400, 0x4, 0x1]}}, 0x5c)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)

09:02:03 executing program 0:
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)

09:02:03 executing program 3:
pselect6(0x40, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff0001, 0x5}, &(0x7f0000000140)={0x6, 0x1, 0x2, 0x0, 0x6, 0x3f, 0x1ff, 0x284}, &(0x7f0000000180)={0x6, 0x0, 0x1ff, 0x7, 0x8, 0x10000, 0x8, 0x258}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8})

09:02:03 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x4e23, 0x1, @mcast1}, 0xffffffffffffffff, {[0xe02, 0x7ff, 0xfa3, 0x223c, 0x101, 0x400, 0x4, 0x1]}}, 0x5c)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)

09:02:03 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000580)=""/4096, &(0x7f0000000080)=0x1000)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8)

09:02:03 executing program 0:
pselect6(0x40, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, &(0x7f0000000140)={0x6, 0x1, 0x2, 0x0, 0x6, 0x3f, 0x1ff, 0x284}, &(0x7f0000000180)={0x6, 0x0, 0x1ff, 0x7, 0x8, 0x10000, 0x8, 0x258}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8})

09:02:03 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000080), 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r1)
setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000000), 0x4)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)

09:02:03 executing program 0:
pselect6(0x40, &(0x7f0000000100)={0x7}, &(0x7f0000000140)={0x6, 0x1, 0x2, 0x0, 0x6, 0x3f, 0x1ff, 0x284}, &(0x7f0000000180)={0x6, 0x0, 0x1ff, 0x7, 0x8, 0x10000, 0x8, 0x258}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8})

09:02:03 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000080), 0x4) (async, rerun: 64)
syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r1) (rerun: 64)
setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000000), 0x4)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)

09:02:03 executing program 0:
pselect6(0x40, &(0x7f0000000100)={0x7}, 0x0, &(0x7f0000000180)={0x6, 0x0, 0x1ff, 0x7, 0x8, 0x10000, 0x8, 0x258}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8})

09:02:04 executing program 2:
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)

09:02:04 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0))
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x5)

09:02:04 executing program 2:
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)

09:02:04 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x5)

09:02:04 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4)

09:02:04 executing program 1:
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x5)

09:02:04 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)

09:02:04 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4)

09:02:04 executing program 1:
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x5)

09:02:04 executing program 1:
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x5)

09:02:04 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), r1)
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0)

09:02:04 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x5)

09:02:04 executing program 3:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), r1) (async)
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0)

09:02:04 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000580)=""/4096, &(0x7f0000000080)=0x1000) (async)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8)

09:02:04 executing program 3:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x5)

09:02:04 executing program 3:
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044)
r3 = socket(0x10, 0x3, 0x8)
sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'pim6reg\x00'}}}}, 0x2c}}, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), r3)

09:02:04 executing program 0:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x5)

09:02:04 executing program 3:
pselect6(0x40, &(0x7f0000000100)={0x7}, 0x0, &(0x7f0000000180)={0x6, 0x0, 0x1ff, 0x7, 0x8, 0x10000, 0x8, 0x258}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8})

09:02:04 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044)
r3 = socket(0x10, 0x3, 0x8)
sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'pim6reg\x00'}}}}, 0x2c}}, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), r3) (async)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), r3)

09:02:04 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, 0x0, 0x0)

09:02:04 executing program 0:
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0xfffffffffffffe96, r2, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x60000}, 0x40000)

09:02:04 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, 0x0, 0x0)

09:02:04 executing program 0:
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0xfffffffffffffe96, r2, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x60000}, 0x40000)
socket$igmp6(0xa, 0x3, 0x2) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) (async)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0xfffffffffffffe96, r2, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x60000}, 0x40000) (async)

[  984.969354][ T5209] Bluetooth: hci3: command 0x041b tx timeout
09:02:04 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, 0x0, 0x0)

09:02:04 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x28}, 0x4}, {0xa, 0x4e24, 0x8001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200003}, 0x0, {[0x9e, 0xa0000001, 0x8, 0x1, 0x6, 0x0, 0x81, 0x2]}}, 0x5c)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000040)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x45080}, 0x20040054)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000000000000b3c6294e0014001462726f6164636173742d6c696e4b0000"], 0x30}}, 0x0)
socketpair(0x25, 0xa, 0x4, &(0x7f0000000300))
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000180), 0x4)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x8, 0x70bd29, 0xf0, {{}, {}, {0x8, 0x11, 0x7}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40811}, 0x4000040)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/net\x00')
sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x202, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x2c}}, 0x20004821)

09:02:04 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x5)

09:02:04 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x28}, 0x4}, {0xa, 0x4e24, 0x8001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200003}, 0x0, {[0x9e, 0xa0000001, 0x8, 0x1, 0x6, 0x0, 0x81, 0x2]}}, 0x5c)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000040) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x45080}, 0x20040054) (async)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000000000000b3c6294e0014001462726f6164636173742d6c696e4b0000"], 0x30}}, 0x0)
socketpair(0x25, 0xa, 0x4, &(0x7f0000000300)) (async)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000180), 0x4)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x8, 0x70bd29, 0xf0, {{}, {}, {0x8, 0x11, 0x7}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40811}, 0x4000040) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/net\x00')
sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x202, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x2c}}, 0x20004821)

09:02:04 executing program 0:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=""/18, &(0x7f0000000040)=0x12)

09:02:04 executing program 0:
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1)

09:02:04 executing program 0:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=""/18, &(0x7f0000000040)=0x12)

09:02:04 executing program 0:
socket$igmp6(0xa, 0x3, 0x2) (async)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2) (async)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1)

09:02:04 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8)
connect$bt_sco(r0, &(0x7f0000000000), 0x8)
connect$bt_sco(r0, &(0x7f0000000240), 0x8)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x7, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2}}}})
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000084}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x4001)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x9, 0x7, {<r3=>0xffffffffffffffff}, {0xffffffffffffffff}, 0x1})
sched_getattr(r3, &(0x7f00000000c0)={0x38}, 0x38, 0x0)
r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000040))

09:02:05 executing program 2:
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000000), 0x4)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r0)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r3, 0x29, 0xc9, 0x0, 0x0)

09:02:05 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
r2 = socket(0x25, 0x1, 0x0)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8)
r3 = socket(0x10, 0x3, 0x0)
getsockopt$MRT6(r2, 0x29, 0xd1, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x1}, 0x14}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r4, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x90}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x844}, 0x4040800)

09:02:05 executing program 1:
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000000), 0x4)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0)
syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r0) (async)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r0)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
socket$igmp6(0xa, 0x3, 0x2) (async)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r3, 0x29, 0xc9, 0x0, 0x0)

09:02:05 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
bind$bt_sco(r1, &(0x7f0000000080), 0x8)

09:02:05 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000040), 0x4)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1)

09:02:05 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
bind$bt_sco(r1, &(0x7f0000000080), 0x8)

09:02:05 executing program 1:
pselect6(0x40, &(0x7f0000000100)={0x7}, 0x0, &(0x7f0000000180)={0x6, 0x0, 0x1ff, 0x7, 0x8, 0x10000, 0x8, 0x258}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8})

09:02:05 executing program 3:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000040), 0x4)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1)
socket$igmp6(0xa, 0x3, 0x2) (async)
setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000040), 0x4) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) (async)

09:02:05 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000), 0x8)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:05 executing program 3:
clock_adjtime(0x2, &(0x7f0000000000)={0x6, 0x7f, 0x9, 0x7, 0x20, 0x5, 0x8, 0x6, 0x5, 0x7, 0xfffffffffffffffb, 0xa2b, 0x81, 0x8, 0x8, 0x0, 0x5, 0x9, 0x0, 0x9, 0xffffffffffff0069, 0xb02, 0x1, 0x4, 0x2, 0x2})
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)

09:02:05 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000), 0x8) (async)
connect$bt_sco(r0, &(0x7f0000000000), 0x8)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:05 executing program 3:
clock_adjtime(0x2, &(0x7f0000000000)={0x6, 0x7f, 0x9, 0x7, 0x20, 0x5, 0x8, 0x6, 0x5, 0x7, 0xfffffffffffffffb, 0xa2b, 0x81, 0x8, 0x8, 0x0, 0x5, 0x9, 0x0, 0x9, 0xffffffffffff0069, 0xb02, 0x1, 0x4, 0x2, 0x2})
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
clock_adjtime(0x2, &(0x7f0000000000)={0x6, 0x7f, 0x9, 0x7, 0x20, 0x5, 0x8, 0x6, 0x5, 0x7, 0xfffffffffffffffb, 0xa2b, 0x81, 0x8, 0x8, 0x0, 0x5, 0x9, 0x0, 0x9, 0xffffffffffff0069, 0xb02, 0x1, 0x4, 0x2, 0x2}) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)

09:02:05 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/183, &(0x7f00000000c0)=0xb7)

09:02:05 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_TID={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000000}, 0x42)
r2 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r2)

09:02:05 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/183, &(0x7f00000000c0)=0xb7)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)
connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/183, &(0x7f00000000c0)=0xb7) (async)

09:02:05 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_TID={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000000}, 0x42)
r2 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r2)

09:02:05 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)=0x5b)

09:02:05 executing program 3:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r1 = socket(0x18, 0x0, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000000), 0x4)

09:02:05 executing program 3:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)=0x5b)

09:02:05 executing program 3:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r1 = socket(0x18, 0x0, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000000), 0x4)

09:02:05 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000080)=""/18, &(0x7f00000000c0)=0x12)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
connect$bt_sco(r0, &(0x7f0000000140)={0x1f, @none}, 0x8)
connect$bt_sco(r0, &(0x7f0000000000), 0x8)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
bind$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8)

09:02:05 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8) (async)
connect$bt_sco(r0, &(0x7f0000000000), 0x8) (async, rerun: 32)
connect$bt_sco(r0, &(0x7f0000000240), 0x8) (async, rerun: 32)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x7, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2}}}}) (async)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000084}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x4001) (async)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x9, 0x7, {<r3=>0xffffffffffffffff}, {0xffffffffffffffff}, 0x1})
sched_getattr(r3, &(0x7f00000000c0)={0x38}, 0x38, 0x0)
r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000040))

09:02:05 executing program 3:
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='syz1\x00'}}}}, 0xfffffdef}}, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r1, 0x513, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x44010)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x308, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xfff}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x200048c1}, 0x20008001)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x800, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4c800)

09:02:05 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1}, 0x1c}}, 0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x8, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x2804)

09:02:05 executing program 3:
socket$igmp6(0xa, 0x3, 0x2) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='syz1\x00'}}}}, 0xfffffdef}}, 0x0) (async)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r1, 0x513, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x44010) (async)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x308, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xfff}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x200048c1}, 0x20008001) (async)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x800, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4c800)

09:02:05 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1}, 0x1c}}, 0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x8, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x2804)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) (async)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1}, 0x1c}}, 0x0) (async)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x8, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x2804) (async)

09:02:05 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000040), 0x4)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)

09:02:05 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
r2 = socket(0x25, 0x1, 0x0)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8)
r3 = socket(0x10, 0x3, 0x0)
getsockopt$MRT6(r2, 0x29, 0xd1, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x1}, 0x14}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r4, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x90}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x844}, 0x4040800)

09:02:05 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32)
connect$bt_sco(r1, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async)
r2 = socket(0x25, 0x1, 0x0)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) (async, rerun: 32)
r3 = socket(0x10, 0x3, 0x0) (async, rerun: 32)
getsockopt$MRT6(r2, 0x29, 0xd1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x1}, 0x14}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r4, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x90}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x844}, 0x4040800)

09:02:06 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000040), 0x4) (async)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)

09:02:06 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)

09:02:06 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', <r1=>0x0, 0x2f, 0x2, 0x3f, 0x8001, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x20, 0x9, 0x4}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000240)={'syztnl2\x00', r1, 0x4, 0x9, 0x1, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x8000, 0x10, 0x10000, 0x6}})
socket$igmp6(0xa, 0x3, 0x2)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000a00), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}]}, 0x28}}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3)

09:02:06 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)

09:02:06 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', <r1=>0x0, 0x2f, 0x2, 0x3f, 0x8001, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x20, 0x9, 0x4}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000240)={'syztnl2\x00', r1, 0x4, 0x9, 0x1, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x8000, 0x10, 0x10000, 0x6}})
socket$igmp6(0xa, 0x3, 0x2) (async)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000a00), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}]}, 0x28}}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3)

09:02:06 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)

09:02:06 executing program 2:
pselect6(0x40, &(0x7f0000000100)={0x7}, &(0x7f0000000140)={0x0, 0x1, 0x2, 0x0, 0x6, 0x3f, 0x1ff, 0x284}, &(0x7f0000000180)={0x6, 0x0, 0x1ff, 0x7, 0x8, 0x10000, 0x8, 0x258}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8})

09:02:06 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)

09:02:06 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000080)=""/18, &(0x7f00000000c0)=0x12)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async, rerun: 32)
connect$bt_sco(r0, &(0x7f0000000140)={0x1f, @none}, 0x8) (async, rerun: 32)
connect$bt_sco(r0, &(0x7f0000000000), 0x8) (async)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async)
bind$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8)

[  987.049513][ T5213] Bluetooth: hci3: command 0x041b tx timeout
09:02:06 executing program 3:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)

09:02:06 executing program 3:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x20}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x44040)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r1)
sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r3, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040844}, 0x44040)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r0, 0x4, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x844)
syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r2)

09:02:06 executing program 3:
getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000000), &(0x7f0000000140)=0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)

09:02:06 executing program 3:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x20}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x44040) (async)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r1)
sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r3, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040844}, 0x44040) (async)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r0, 0x4, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x844) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r2)

09:02:07 executing program 3:
getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000000), &(0x7f0000000140)=0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)

09:02:07 executing program 3:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3ff, '\x00', 0x0, r0, 0x1, 0x4, 0x5}, 0x48)
r2 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x10000, '\x00', r3, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r6, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x8, 0x0, @udp='udp:syz0\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x810)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r4)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r8, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xb6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x100}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000000000d63c000000000000146272fe1eb2dfda51a0f86c696e6b0000"], 0x30}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00e28e21353fb042138410ab0e0427bd7000fddbdf25010000000000000001410000001800170000000100000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)

09:02:07 executing program 1:
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0)

09:02:07 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)

09:02:07 executing program 3:
pselect6(0x40, &(0x7f0000000100)={0x7}, &(0x7f0000000140)={0x0, 0x1, 0x2, 0x0, 0x6, 0x3f, 0x1ff, 0x284}, &(0x7f0000000180)={0x6, 0x0, 0x1ff, 0x7, 0x8, 0x10000, 0x8, 0x258}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8})

09:02:07 executing program 1:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) (async)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3ff, '\x00', 0x0, r0, 0x1, 0x4, 0x5}, 0x48) (async)
r2 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x10000, '\x00', r3, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x48) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r6, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x8, 0x0, @udp='udp:syz0\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x810) (async)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) (async)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r4)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r8, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xb6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x100}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000000000d63c000000000000146272fe1eb2dfda51a0f86c696e6b0000"], 0x30}}, 0x0) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00e28e21353fb042138410ab0e0427bd7000fddbdf25010000000000000001410000001800170000000100000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)

09:02:07 executing program 1:
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0)

09:02:07 executing program 1:
socket$igmp6(0xa, 0x3, 0x2) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0)

09:02:07 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/163, 0xa3, <r1=>0x0, &(0x7f0000000100)=""/29, 0x1d}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r1, 0x4)

09:02:07 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40400c0}, 0x4)

09:02:07 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async, rerun: 32)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/163, 0xa3, <r1=>0x0, &(0x7f0000000100)=""/29, 0x1d}}, 0x10) (rerun: 32)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r1, 0x4)

09:02:07 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40400c0}, 0x4)
socket$igmp6(0xa, 0x3, 0x2) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40400c0}, 0x4) (async)

09:02:07 executing program 1:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=""/188, 0xbc, <r0=>0x0, &(0x7f00000001c0)=""/61, 0x3d}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r0, 0xfffffffffffffde9)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r0, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000300)={&(0x7f0000000240)=""/149, 0x95, 0x0, &(0x7f0000000140)=""/18, 0x12}}, 0x10)

09:02:07 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4)

09:02:07 executing program 1:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=""/188, 0xbc, <r0=>0x0, &(0x7f00000001c0)=""/61, 0x3d}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r0, 0xfffffffffffffde9)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r0, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000300)={&(0x7f0000000240)=""/149, 0x95, 0x0, &(0x7f0000000140)=""/18, 0x12}}, 0x10)

09:02:07 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async, rerun: 64)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) (rerun: 64)

09:02:07 executing program 1:
getrandom(&(0x7f0000000040)=""/37, 0x25, 0x2)
getrandom(&(0x7f0000000080)=""/10, 0xa, 0x2)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)

09:02:07 executing program 1:
syz_io_uring_setup(0x70b3, &(0x7f0000000080)={0x0, 0x4775, 0x10, 0x2, 0xce}, &(0x7f0000000100), &(0x7f0000000140))
r0 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$MRT6(r0, 0x29, 0xd0, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r2 = socket(0x25, 0x1, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={0x0}}, 0x0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x10, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

09:02:07 executing program 1:
getrandom(&(0x7f0000000040)=""/37, 0x25, 0x2)
getrandom(&(0x7f0000000080)=""/10, 0xa, 0x2) (async)
getrandom(&(0x7f0000000080)=""/10, 0xa, 0x2)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)

09:02:07 executing program 0:
syz_io_uring_setup(0x70b3, &(0x7f0000000080)={0x0, 0x4775, 0x10, 0x2, 0xce}, &(0x7f0000000100), &(0x7f0000000140)) (async)
r0 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$MRT6(r0, 0x29, 0xd0, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)
r2 = socket(0x25, 0x1, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={0x0}}, 0x0) (async)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x10, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

09:02:07 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:07 executing program 1:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r0, 0x20, &(0x7f0000000180)={&(0x7f0000000000)=""/147, 0x93, 0x0, &(0x7f00000000c0)=""/169, 0xa9}}, 0x10)

09:02:07 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:07 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0xb, 0x10001, @udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x40)

09:02:07 executing program 0:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r0, 0x20, &(0x7f0000000180)={&(0x7f0000000000)=""/147, 0x93, 0x0, &(0x7f00000000c0)=""/169, 0xa9}}, 0x10)

09:02:07 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)

09:02:07 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0xb, 0x10001, @udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x40)
socket$igmp6(0xa, 0x3, 0x2) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0xb, 0x10001, @udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x40) (async)

09:02:07 executing program 0:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000040)=""/7, 0x7, 0x0, &(0x7f0000000080)=""/237, 0xed}}, 0x10)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x2}, 0x8)
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, r0, 0x0, 0x3, 0x4}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0xfffff801, 0x0, r1, 0xffff, '\x00', 0x0, r0, 0x4, 0x3, 0x9}, 0x48)

09:02:07 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4008)

09:02:07 executing program 0:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000040)=""/7, 0x7, 0x0, &(0x7f0000000080)=""/237, 0xed}}, 0x10) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x2}, 0x8)
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, r0, 0x0, 0x3, 0x4}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0xfffff801, 0x0, r1, 0xffff, '\x00', 0x0, r0, 0x4, 0x3, 0x9}, 0x48)

09:02:07 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4008)

09:02:07 executing program 0:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x3ff, <r0=>0x0}, 0x8)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x6}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4)

09:02:07 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0)

09:02:07 executing program 0:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x3ff, <r0=>0x0}, 0x8)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x6}, 0x8) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4)

09:02:07 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0)

09:02:07 executing program 2:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x24, r0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x68, r3, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='syz1\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40008}, 0x84)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9dcc", @ANYRES16=r0, @ANYBLOB="000825bd7000fedbdf2501000000000000000941000000140018000000077564703a73797a3200000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x40001)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000127bd7000fcdbdf25010000000000000009410000004c00180000020073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009e3a9dcdd74edeffbb1a999e2396617dd8d9f4bfbc51109ae457628657f3d81755a2829f0703"], 0x68}, 0x1, 0x0, 0x0, 0x24000814}, 0xc004)

09:02:07 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
socketpair(0x2a, 0x3, 0x1, &(0x7f0000000040))

09:02:07 executing program 0:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffff71, '\x00', 0x0, r0, 0x3, 0x2, 0x1}, 0x48)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r0, 0x20, &(0x7f0000000540)={&(0x7f0000000480)=""/98, 0x62, <r1=>0x0, &(0x7f0000000500)}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=r1, 0x4)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4)
socketpair(0xa, 0x800, 0x2, &(0x7f00000003c0)={<r3=>0xffffffffffffffff})
connect$bt_sco(r3, &(0x7f0000000440), 0x8)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000000c0)={0xc, <r5=>0x0})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000300)={&(0x7f00000001c0)=""/18, 0x12, <r6=>0x0, &(0x7f0000000200)=""/214, 0xd6}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r6, 0x4)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r5})

09:02:07 executing program 2:
pselect6(0x40, &(0x7f0000000100)={0x7}, &(0x7f0000000140)={0x0, 0x1, 0x2, 0x0, 0x6, 0x3f, 0x1ff, 0x284}, &(0x7f0000000180)={0x6, 0x0, 0x1ff, 0x7, 0x8, 0x10000, 0x8, 0x258}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8})

09:02:08 executing program 0:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x24, r0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x68, r3, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='syz1\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40008}, 0x84)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9dcc", @ANYRES16=r0, @ANYBLOB="000825bd7000fedbdf2501000000000000000941000000140018000000077564703a73797a3200000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x40001)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000127bd7000fcdbdf25010000000000000009410000004c00180000020073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009e3a9dcdd74edeffbb1a999e2396617dd8d9f4bfbc51109ae457628657f3d81755a2829f0703"], 0x68}, 0x1, 0x0, 0x0, 0x24000814}, 0xc004)

09:02:08 executing program 0:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x24, r0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x68, r3, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='syz1\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40008}, 0x84)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9dcc", @ANYRES16=r0, @ANYBLOB="000825bd7000fedbdf2501000000000000000941000000140018000000077564703a73797a3200000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x40001)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000127bd7000fcdbdf25010000000000000009410000004c00180000020073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009e3a9dcdd74edeffbb1a999e2396617dd8d9f4bfbc51109ae457628657f3d81755a2829f0703"], 0x68}, 0x1, 0x0, 0x0, 0x24000814}, 0xc004)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x24, r0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (async)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x68, r3, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='syz1\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40008}, 0x84) (async)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9dcc", @ANYRES16=r0, @ANYBLOB="000825bd7000fedbdf2501000000000000000941000000140018000000077564703a73797a3200000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x40001) (async)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000127bd7000fcdbdf25010000000000000009410000004c00180000020073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009e3a9dcdd74edeffbb1a999e2396617dd8d9f4bfbc51109ae457628657f3d81755a2829f0703"], 0x68}, 0x1, 0x0, 0x0, 0x24000814}, 0xc004) (async)

09:02:08 executing program 0:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x24, r0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x68, r3, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='syz1\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40008}, 0x84)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9dcc", @ANYRES16=r0, @ANYBLOB="000825bd7000fedbdf2501000000000000000941000000140018000000077564703a73797a3200000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x40001)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000127bd7000fcdbdf25010000000000000009410000004c00180000020073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009e3a9dcdd74edeffbb1a999e2396617dd8d9f4bfbc51109ae457628657f3d81755a2829f0703"], 0x68}, 0x1, 0x0, 0x0, 0x24000814}, 0xc004)

09:02:08 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48)
setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e24, 0x2, @private0, 0x4}, {0xa, 0x4e22, 0x40, @dev={0xfe, 0x80, '\x00', 0x23}, 0x1ff}, 0x1, {[0xea60, 0x4, 0x5, 0x3, 0x3, 0x5, 0x8, 0x2]}}, 0x5c)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)

09:02:08 executing program 0:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x24, r0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x68, r3, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='syz1\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40008}, 0x84)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9dcc", @ANYRES16=r0, @ANYBLOB="000825bd7000fedbdf2501000000000000000941000000140018000000077564703a73797a3200000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x40001)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000127bd7000fcdbdf25010000000000000009410000004c00180000020073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009e3a9dcdd74edeffbb1a999e2396617dd8d9f4bfbc51109ae457628657f3d81755a2829f0703"], 0x68}, 0x1, 0x0, 0x0, 0x24000814}, 0xc004)

09:02:08 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48)
setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e24, 0x2, @private0, 0x4}, {0xa, 0x4e22, 0x40, @dev={0xfe, 0x80, '\x00', 0x23}, 0x1ff}, 0x1, {[0xea60, 0x4, 0x5, 0x3, 0x3, 0x5, 0x8, 0x2]}}, 0x5c)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
socket$igmp6(0xa, 0x3, 0x2) (async)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) (async)
setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e24, 0x2, @private0, 0x4}, {0xa, 0x4e22, 0x40, @dev={0xfe, 0x80, '\x00', 0x23}, 0x1ff}, 0x1, {[0xea60, 0x4, 0x5, 0x3, 0x3, 0x5, 0x8, 0x2]}}, 0x5c) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)

09:02:08 executing program 0:
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

09:02:08 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r3)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3)

09:02:08 executing program 0:
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

09:02:08 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r3)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3)

09:02:08 executing program 0:
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

09:02:08 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e20, 0x1000, @private0, 0x8}, {0xa, 0x4e20, 0xd6d5, @local, 0x5}, 0x0, {[0x7, 0x8, 0xfffffe00, 0x2e88, 0x8, 0x0, 0x7f, 0x6]}}, 0x5c)
setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x400}, {0xa, 0x4e20, 0x0, @mcast1, 0x8}, 0x1, {[0xfffffe00, 0xfffffe00, 0x0, 0x80000000, 0x8, 0x1, 0x9, 0x6a5]}}, 0x5c)

09:02:08 executing program 0:
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

09:02:08 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e20, 0x1000, @private0, 0x8}, {0xa, 0x4e20, 0xd6d5, @local, 0x5}, 0x0, {[0x7, 0x8, 0xfffffe00, 0x2e88, 0x8, 0x0, 0x7f, 0x6]}}, 0x5c)
setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x400}, {0xa, 0x4e20, 0x0, @mcast1, 0x8}, 0x1, {[0xfffffe00, 0xfffffe00, 0x0, 0x80000000, 0x8, 0x1, 0x9, 0x6a5]}}, 0x5c)

09:02:08 executing program 1:
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

09:02:08 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)

09:02:08 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
socket$nl_generic(0x10, 0x3, 0x10)

09:02:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

09:02:08 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)

09:02:08 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

09:02:08 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
socket$nl_generic(0x10, 0x3, 0x10)

09:02:08 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

09:02:08 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)
socket$nl_generic(0x10, 0x3, 0x10)

09:02:08 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

09:02:08 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r3, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'dvmrp1\x00'}}}}}, 0x34}}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r2)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="20002abd7000fcdbdf25010000000000000009410000004c003665df754c5c7bdc2ed4188100000073797a30000000000000000000000000000000000000000000aea61d7307651fe200"/108], 0x68}, 0x1, 0x0, 0x0, 0x20008010}, 0x40010)

[  989.044093][T20075] tipc: Enabling of bearer <ib:dvmrp1> rejected, failed to enable media
09:02:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, 0x0, 0x0)

09:02:08 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r3, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'dvmrp1\x00'}}}}}, 0x34}}, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r2)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="20002abd7000fcdbdf25010000000000000009410000004c003665df754c5c7bdc2ed4188100000073797a30000000000000000000000000000000000000000000aea61d7307651fe200"/108], 0x68}, 0x1, 0x0, 0x0, 0x20008010}, 0x40010)

[  989.105977][T20079] tipc: Enabling of bearer <ib:dvmrp1> rejected, failed to enable media
09:02:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, 0x0, 0x0)

[  989.129599][ T5213] Bluetooth: hci3: command 0x041b tx timeout
09:02:08 executing program 3:
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)

09:02:08 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async)
socketpair(0x2a, 0x3, 0x1, &(0x7f0000000040))

09:02:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, 0x0, 0x0)

09:02:08 executing program 2:
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)

09:02:08 executing program 3:
pselect6(0x40, &(0x7f0000000100)={0x7}, &(0x7f0000000140)={0x6, 0x0, 0x2, 0x0, 0x6, 0x3f, 0x1ff, 0x284}, &(0x7f0000000180)={0x6, 0x0, 0x1ff, 0x7, 0x8, 0x10000, 0x8, 0x258}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8})

09:02:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

09:02:08 executing program 3:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
socket$nl_generic(0x10, 0x3, 0x10)

09:02:08 executing program 2:
pselect6(0x40, &(0x7f0000000100)={0x7}, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x6, 0x3f, 0x1ff, 0x284}, &(0x7f0000000180)={0x6, 0x0, 0x1ff, 0x7, 0x8, 0x10000, 0x8, 0x258}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8})

09:02:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)

09:02:08 executing program 3:
pselect6(0x40, &(0x7f0000000100)={0x7}, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x1ff, 0x284}, &(0x7f0000000180)={0x6, 0x0, 0x1ff, 0x7, 0x8, 0x10000, 0x8, 0x258}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8})

09:02:08 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
socket$nl_generic(0x10, 0x3, 0x10)

09:02:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)

09:02:09 executing program 2:
pselect6(0x40, &(0x7f0000000100)={0x7}, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x284}, &(0x7f0000000180)={0x6, 0x0, 0x1ff, 0x7, 0x8, 0x10000, 0x8, 0x258}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8})

09:02:09 executing program 3:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffff71, '\x00', 0x0, r0, 0x3, 0x2, 0x1}, 0x48)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r0, 0x20, &(0x7f0000000540)={&(0x7f0000000480)=""/98, 0x62, 0x0, &(0x7f0000000500)}}, 0x10) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r0, 0x20, &(0x7f0000000540)={&(0x7f0000000480)=""/98, 0x62, <r1=>0x0, &(0x7f0000000500)}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=r1, 0x4)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4)
socketpair(0xa, 0x800, 0x2, &(0x7f00000003c0)={<r3=>0xffffffffffffffff})
connect$bt_sco(r3, &(0x7f0000000440), 0x8)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000000c0)={0xc, <r5=>0x0})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000300)={&(0x7f00000001c0)=""/18, 0x12, <r6=>0x0, &(0x7f0000000200)=""/214, 0xd6}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r6, 0x4) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r6, 0x4)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r5}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r5})

09:02:09 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)

09:02:09 executing program 2:
pselect6(0x40, &(0x7f0000000100)={0x7}, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x284}, &(0x7f0000000180)={0x6, 0x0, 0x1ff, 0x7, 0x8, 0x10000, 0x8, 0x258}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8})

09:02:09 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff}}, 0x0)

09:02:09 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x3, @loopback, 0x7}, {0xa, 0x4e24, 0x101, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1, {[0x0, 0x211, 0xa78, 0x14, 0x2, 0x800, 0x4, 0x32]}}, 0x5c)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
socket$igmp6(0xa, 0x3, 0x2)

09:02:09 executing program 3:
pselect6(0x40, &(0x7f0000000100)={0x7}, &(0x7f0000000140)={0x6}, &(0x7f0000000180)={0x6, 0x0, 0x1ff, 0x7, 0x8, 0x10000, 0x8, 0x258}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8})

09:02:09 executing program 0:
pselect6(0x40, &(0x7f0000000100)={0x7}, &(0x7f0000000140)={0x6}, 0x0, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8})

09:02:09 executing program 2:
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080)={r0, r1+10000000}, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:09 executing program 3:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x3, @loopback, 0x7}, {0xa, 0x4e24, 0x101, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1, {[0x0, 0x211, 0xa78, 0x14, 0x2, 0x800, 0x4, 0x32]}}, 0x5c) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
socket$igmp6(0xa, 0x3, 0x2)

09:02:09 executing program 2:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000080)=0xffffffffffffffb2)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xcb}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1f}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1f}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x30040801)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

09:02:09 executing program 3:
clock_gettime(0x0, &(0x7f0000000040)) (async)
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080)={r0, r1+10000000}, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:09 executing program 0:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:09 executing program 0:
pselect6(0x40, &(0x7f0000000100)={0x7}, &(0x7f0000000140)={0x6}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8})

09:02:09 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$MRT6(r0, 0x29, 0xce, &(0x7f0000000000), &(0x7f0000000040)=0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0xf, 0x3, 0x8001)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1)

09:02:09 executing program 3:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000080)=0xffffffffffffffb2)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xcb}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1f}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1f}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x30040801)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

09:02:09 executing program 2:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000080)=0xffffffffffffffb2)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xcb}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1f}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1f}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x30040801)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

09:02:09 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$MRT6(r0, 0x29, 0xce, &(0x7f0000000000), &(0x7f0000000040)=0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0xf, 0x3, 0x8001)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1)
socket$igmp6(0xa, 0x3, 0x2) (async)
getsockopt$MRT6(r0, 0x29, 0xce, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xf, 0x3, 0x8001) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) (async)

09:02:09 executing program 3:
pselect6(0x40, &(0x7f0000000100)={0x7}, &(0x7f0000000140)={0x6}, 0x0, 0x0, 0x0)

09:02:09 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = gettid()
r2 = syz_clone(0x4000200, &(0x7f0000000f40)="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", 0xb23, 0x0, &(0x7f00000003c0), 0x0)
kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000480)={r0})
r3 = getpid()
kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000580))
r4 = epoll_create(0x400)
r5 = socket(0x2, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0x10000000})
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
kcmp$KCMP_EPOLL_TFD(r2, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={r4, r6, 0x3})
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000040)={0x4})
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000080)={0x10})

09:02:09 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000000)="9c99b0d17ff8c1cc461e7793c85f7af0bbfd46f1db1f25802798fcab3c16418c8baf31591d333e29c34bea4a3379382d33573a02db8b5374a3cab4f0bbbda4f547a3371aeac05337829ca5af3960a9a04172f048d9e546514c736f270172d952682b15f6b956a15a")
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:09 executing program 1:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = gettid()
r2 = syz_clone(0x4000200, &(0x7f0000000f40)="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", 0xb23, 0x0, &(0x7f00000003c0), 0x0)
kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000480)={r0})
r3 = getpid()
kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000580))
r4 = epoll_create(0x400)
r5 = socket(0x2, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0x10000000})
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
kcmp$KCMP_EPOLL_TFD(r2, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={r4, r6, 0x3})
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000040)={0x4})
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000080)={0x10})
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
gettid() (async)
syz_clone(0x4000200, &(0x7f0000000f40)="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", 0xb23, 0x0, &(0x7f00000003c0), 0x0) (async)
kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000480)={r0}) (async)
getpid() (async)
kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000580)) (async)
epoll_create(0x400) (async)
socket(0x2, 0x2, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0x10000000}) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
kcmp$KCMP_EPOLL_TFD(r2, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={r4, r6, 0x3}) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000040)={0x4}) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) (async)
epoll_create1(0x0) (async)
epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000080)={0x10}) (async)

09:02:09 executing program 0:
bpf$BPF_BTF_GET_FD_BY_ID(0x2, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:09 executing program 2:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000000)="9c99b0d17ff8c1cc461e7793c85f7af0bbfd46f1db1f25802798fcab3c16418c8baf31591d333e29c34bea4a3379382d33573a02db8b5374a3cab4f0bbbda4f547a3371aeac05337829ca5af3960a9a04172f048d9e546514c736f270172d952682b15f6b956a15a")
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:09 executing program 3:
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000040), 0x4)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)

09:02:09 executing program 0:
r0 = socket$tipc(0x1e, 0x0, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r1, &(0x7f0000000100)=@id, 0x10)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
accept4$tipc(r1, &(0x7f0000000040)=@id, &(0x7f0000000000)=0x10, 0x180000)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:09 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x3, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:09 executing program 3:
r0 = socket$igmp6(0xa, 0x3, 0x2) (async)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000040), 0x4) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)

09:02:09 executing program 0:
bpf$BPF_BTF_GET_FD_BY_ID(0x4, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:09 executing program 1:
socket$tipc(0x1e, 0x0, 0x0) (async)
r0 = socket$tipc(0x1e, 0x0, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r1, &(0x7f0000000100)=@id, 0x10)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
accept4$tipc(r1, &(0x7f0000000040)=@id, &(0x7f0000000000)=0x10, 0x180000)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:09 executing program 0:
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x46}, 0x8)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x3}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)

09:02:09 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x5, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:09 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r2 = epoll_create(0x400)
r3 = socket(0x2, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)={0x40000000})
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r1, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x6ccd, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24000000}, 0x90)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r1, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x8, @link='syz1\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20040040}, 0x41)

09:02:09 executing program 0:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, 0x0, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x20, 0x4)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))

09:02:09 executing program 3:
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x46}, 0x8)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x3}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x46}, 0x8) (async)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x3}, 0x8) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async)

09:02:09 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={<r1=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000080)={r1})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:09 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x6, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:09 executing program 0:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, 0x0, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x20, 0x4)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) (async)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, 0x0, 0x0) (async)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x20, 0x4) (async)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)) (async)

09:02:09 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={<r1=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000080)={r1}) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:09 executing program 3:
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)
r2 = epoll_create(0x400)
r3 = socket(0x2, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)={0x40000000}) (async)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r1, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x6ccd, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24000000}, 0x90) (async, rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r1, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x8, @link='syz1\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20040040}, 0x41)

09:02:09 executing program 1:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x7d55, <r0=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r0, 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)

09:02:09 executing program 0:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8)

09:02:09 executing program 1:
bpf$BPF_BTF_GET_FD_BY_ID(0x7, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:09 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x7d55, <r0=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r0, 0x4) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r0, 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)

09:02:09 executing program 0:
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x1241}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b163356fb9239d6c0b515baaac6e6580e35f66049c7aba6d5908c654f92f4d29e3e569d56bf02e5445219bbe9c43e9dac0a9ba8b5703614fb4a2792f927546b309ea67891366cc4d138dcb1508b0da60de3296a936586db7836da4", @ANYRES16=0x0, @ANYBLOB="01000000000000000000010000000000000007410000004c00180000000073797a31000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003fb744526dd5f17933dafaeecbc3a50285432f3d34f750f3d55e3ad264c51f650774ba39f0dae1ef60b0e76262f841b62d03f7d36382de08a97691a7181824691a8c94f339d0ba5b7f33aae977f390a1a55e11be62f971dd00c8dbcf3d33c8595ca3a343"], 0x68}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0)

09:02:09 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8)

09:02:09 executing program 3:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)
accept4$tipc(r0, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x0)

09:02:09 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0x40305828, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000d80)=""/199, &(0x7f0000000e80)=0xc7)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x9, [@enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x81}, {0xc, 0xff}]}, @struct={0xe, 0x8, 0x0, 0x4, 0x1, 0x50000, [{0x0, 0x3, 0x4}, {0x1, 0x5, 0x10001}, {0xc, 0x0, 0x8001}, {0x4, 0x1, 0x1}, {0x1, 0x5, 0x4}, {0x3, 0x0, 0x5}, {0x5, 0x2, 0x9}, {0x9, 0x2, 0xfffffffd}]}]}, {0x0, [0x30, 0xf2, 0x30, 0x30, 0x5f, 0x0, 0x2e]}}, &(0x7f00000002c0)=""/8, 0xa9, 0x8, 0x1, 0x80000001}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r2, 0x287, '\x00', r1, r3, 0x2, 0x4, 0x2}, 0x48)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', r1, 0x29, 0x5, 0x4, 0xa9, 0x51, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', 0x8000, 0x7800, 0x8, 0x101}})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4)
sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x100, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20008090)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x0, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x800}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000001)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4)

09:02:09 executing program 3:
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x1241}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b163356fb9239d6c0b515baaac6e6580e35f66049c7aba6d5908c654f92f4d29e3e569d56bf02e5445219bbe9c43e9dac0a9ba8b5703614fb4a2792f927546b309ea67891366cc4d138dcb1508b0da60de3296a936586db7836da4", @ANYRES16=0x0, @ANYBLOB="01000000000000000000010000000000000007410000004c00180000000073797a31000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003fb744526dd5f17933dafaeecbc3a50285432f3d34f750f3d55e3ad264c51f650774ba39f0dae1ef60b0e76262f841b62d03f7d36382de08a97691a7181824691a8c94f339d0ba5b7f33aae977f390a1a55e11be62f971dd00c8dbcf3d33c8595ca3a343"], 0x68}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0)
socket$igmp6(0xa, 0x3, 0x2) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x1241}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b163356fb9239d6c0b515baaac6e6580e35f66049c7aba6d5908c654f92f4d29e3e569d56bf02e5445219bbe9c43e9dac0a9ba8b5703614fb4a2792f927546b309ea67891366cc4d138dcb1508b0da60de3296a936586db7836da4", @ANYRES16=0x0, @ANYBLOB="01000000000000000000010000000000000007410000004c00180000000073797a31000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003fb744526dd5f17933dafaeecbc3a50285432f3d34f750f3d55e3ad264c51f650774ba39f0dae1ef60b0e76262f841b62d03f7d36382de08a97691a7181824691a8c94f339d0ba5b7f33aae977f390a1a55e11be62f971dd00c8dbcf3d33c8595ca3a343"], 0x68}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) (async)

09:02:09 executing program 1:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)
accept4$tipc(r0, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x0)

09:02:09 executing program 0:
socketpair(0x0, 0x1, 0x678, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008050}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r3)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r4, 0x200, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'syz_tun\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x14)

09:02:09 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0x40305828, 0x0) (async)
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000d80)=""/199, &(0x7f0000000e80)=0xc7) (async)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x9, [@enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x81}, {0xc, 0xff}]}, @struct={0xe, 0x8, 0x0, 0x4, 0x1, 0x50000, [{0x0, 0x3, 0x4}, {0x1, 0x5, 0x10001}, {0xc, 0x0, 0x8001}, {0x4, 0x1, 0x1}, {0x1, 0x5, 0x4}, {0x3, 0x0, 0x5}, {0x5, 0x2, 0x9}, {0x9, 0x2, 0xfffffffd}]}]}, {0x0, [0x30, 0xf2, 0x30, 0x30, 0x5f, 0x0, 0x2e]}}, &(0x7f00000002c0)=""/8, 0xa9, 0x8, 0x1, 0x80000001}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r2, 0x287, '\x00', r1, r3, 0x2, 0x4, 0x2}, 0x48) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', r1, 0x29, 0x5, 0x4, 0xa9, 0x51, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', 0x8000, 0x7800, 0x8, 0x101}}) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4)
sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x100, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20008090) (async)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x0, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x800}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000001) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4)

09:02:09 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x8, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:10 executing program 1:
socket$igmp6(0xa, 0x3, 0x2)
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)
getsockopt$MRT6(r0, 0x29, 0xd0, &(0x7f0000000000), &(0x7f0000000100)=0x4)

09:02:10 executing program 3:
futex(&(0x7f0000000000)=0x1, 0xb, 0x2, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)=0xffffffff, 0x0)
futex(&(0x7f00000000c0)=0x2, 0x100, 0x1, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)=0x2, 0x2)
futex(&(0x7f0000000180)=0x1, 0xb, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000200), 0x0)
epoll_pwait2(0xffffffffffffffff, &(0x7f0000000240)=[{}, {}], 0x2, &(0x7f0000000280), &(0x7f00000002c0)={[0x400]}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:10 executing program 2:
futex(&(0x7f0000000000)=0x1, 0xb, 0x2, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)=0xffffffff, 0x0)
futex(&(0x7f00000000c0)=0x2, 0x100, 0x1, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)=0x2, 0x2)
futex(&(0x7f0000000180)=0x1, 0xb, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000200), 0x0)
epoll_pwait2(0xffffffffffffffff, &(0x7f0000000240)=[{}, {}], 0x2, &(0x7f0000000280), &(0x7f00000002c0)={[0x400]}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:10 executing program 0:
bpf$BPF_BTF_GET_FD_BY_ID(0x9, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:10 executing program 3:
socketpair(0x0, 0x1, 0x678, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008050}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r3)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r4, 0x200, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'syz_tun\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x14)
socketpair(0x0, 0x1, 0x678, &(0x7f0000000040)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) (async)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) (async)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008050}, 0x80) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), r3) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r4, 0x200, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'syz_tun\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x14) (async)

09:02:10 executing program 1:
socketpair(0x0, 0x1, 0x678, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008050}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r3)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r4, 0x200, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'syz_tun\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x14)

09:02:10 executing program 0:
socket$igmp6(0xa, 0x3, 0x2)
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)
getsockopt$MRT6(r0, 0x29, 0xd0, &(0x7f0000000000), &(0x7f0000000100)=0x4)
socket$igmp6(0xa, 0x3, 0x2) (async)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) (async)
getsockopt$MRT6(r0, 0x29, 0xd0, &(0x7f0000000000), &(0x7f0000000100)=0x4) (async)

09:02:10 executing program 2:
getgid()
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000000))

09:02:10 executing program 3:
futex(&(0x7f0000000000)=0x1, 0xb, 0x2, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)=0xffffffff, 0x0)
futex(&(0x7f00000000c0)=0x2, 0x100, 0x1, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)=0x2, 0x2)
futex(&(0x7f0000000180)=0x1, 0xb, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000200), 0x0)
epoll_pwait2(0xffffffffffffffff, &(0x7f0000000240)=[{}, {}], 0x2, &(0x7f0000000280), &(0x7f00000002c0)={[0x400]}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:10 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)

09:02:10 executing program 1:
getgid() (async, rerun: 64)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000000)) (rerun: 64)

09:02:10 executing program 3:
futex(&(0x7f0000000000)=0x1, 0xb, 0x2, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)=0xffffffff, 0x0) (async)
futex(&(0x7f00000000c0)=0x2, 0x100, 0x1, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)=0x2, 0x2) (async)
futex(&(0x7f0000000180)=0x1, 0xb, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000200), 0x0) (async)
epoll_pwait2(0xffffffffffffffff, &(0x7f0000000240)=[{}, {}], 0x2, &(0x7f0000000280), &(0x7f00000002c0)={[0x400]}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:10 executing program 0:
futex(&(0x7f0000000000)=0x1, 0xb, 0x2, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)=0xffffffff, 0x0)
futex(&(0x7f00000000c0)=0x2, 0x100, 0x1, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)=0x2, 0x2)
futex(&(0x7f0000000180)=0x1, 0xb, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000200), 0x0)
epoll_pwait2(0xffffffffffffffff, &(0x7f0000000240)=[{}, {}], 0x2, &(0x7f0000000280), &(0x7f00000002c0)={[0x400]}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:10 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r1 = socket(0x29, 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0)
setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000040), 0x4)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4)

09:02:10 executing program 3:
futex(&(0x7f0000000000)=0x1, 0xb, 0x2, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)=0xffffffff, 0x0)

09:02:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:10 executing program 0:
futex(0x0, 0xb, 0x2, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)=0xffffffff, 0x0)

09:02:10 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)
r1 = socket(0x29, 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) (async)
setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000040), 0x4) (async)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4)

09:02:10 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @union={0xb, 0x4, 0x0, 0x5, 0x0, 0x10001, [{0x5, 0x2, 0x40000}, {0x7, 0x2, 0x2}, {0x7, 0x0, 0x3}, {0x6, 0x2, 0x800}]}]}, {0x0, [0x27, 0x30]}}, &(0x7f0000000080)=""/61, 0x64, 0x3d, 0x1, 0x4}, 0x20)

09:02:10 executing program 3:
futex(0x0, 0x0, 0x2, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)=0xffffffff, 0x0)

09:02:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:10 executing program 3:
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r2 = socket(0x25, 0x1, 0x0)
bind$bt_hci(r2, 0x0, 0x925d3e900a9b2e35)
sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40088100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x18, 0x18, {0x8, @bearer=@l2={'ib', 0x3a, 'veth1_vlan\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x24000040}, 0x40000)

09:02:10 executing program 1:
futex(0x0, 0x0, 0x2, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)=0xffffffff, 0x0)

09:02:10 executing program 0:
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080))
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xff, <r0=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4)

09:02:10 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @union={0xb, 0x4, 0x0, 0x5, 0x0, 0x10001, [{0x5, 0x2, 0x40000}, {0x7, 0x2, 0x2}, {0x7, 0x0, 0x3}, {0x6, 0x2, 0x800}]}]}, {0x0, [0x27, 0x30]}}, &(0x7f0000000080)=""/61, 0x64, 0x3d, 0x1, 0x4}, 0x20)

09:02:10 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r2 = socket(0x25, 0x1, 0x0)
bind$bt_hci(r2, 0x0, 0x925d3e900a9b2e35)
sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40088100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x18, 0x18, {0x8, @bearer=@l2={'ib', 0x3a, 'veth1_vlan\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x24000040}, 0x40000)

09:02:10 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @union={0xb, 0x4, 0x0, 0x5, 0x0, 0x10001, [{0x5, 0x2, 0x40000}, {0x7, 0x2, 0x2}, {0x7, 0x0, 0x3}, {0x6, 0x2, 0x800}]}]}, {0x0, [0x27, 0x30]}}, &(0x7f0000000080)=""/61, 0x64, 0x3d, 0x1, 0x4}, 0x20)

09:02:10 executing program 0:
futex(0x0, 0x0, 0x2, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)=0xffffffff, 0x0)

09:02:10 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
socket$nl_generic(0x10, 0x3, 0x10)

09:02:10 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000140), 0x8)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000040), 0x8)
connect$bt_sco(r1, &(0x7f0000000100), 0x8)
connect$bt_sco(r1, &(0x7f00000000c0), 0x8)
connect$bt_sco(r1, &(0x7f0000000180), 0xfffffffffffffd9b)

09:02:10 executing program 0:
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080))
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xff}, 0x8) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xff, <r0=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4)

09:02:10 executing program 1:
futex(0x0, 0xb, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)=0xffffffff, 0x0)

09:02:10 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)
socket$nl_generic(0x10, 0x3, 0x10)

09:02:10 executing program 1:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0xa280, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0)
r3 = socket(0x9, 0x4, 0x8001)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan0\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)

09:02:10 executing program 0:
futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000000080)=0xffffffff, 0x0)

09:02:10 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x200, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x8840)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x81, '\x00', 0x0, r2, 0x2, 0x3, 0x1}, 0x48)

[  991.211583][ T5209] Bluetooth: hci3: command 0x041b tx timeout
09:02:10 executing program 0:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) (async)
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0xa280, 0x0) (async)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0) (async)
r3 = socket(0x9, 0x4, 0x8001)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan0\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)

09:02:10 executing program 1:
futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000000080)=0xffffffff, 0x0)

09:02:10 executing program 1:
futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000000080)=0xffffffff, 0x0)

09:02:10 executing program 0:
futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000000080)=0xffffffff, 0x0)

09:02:10 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x200, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x8840)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x81, '\x00', 0x0, r2, 0x2, 0x3, 0x1}, 0x48)

09:02:11 executing program 0:
futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000000080)=0xffffffff, 0x0)

09:02:11 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000240), 0x4)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x18, 0x0, 0x0)
connect$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed}, 0x8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r1, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20000820)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@ipv4}}, &(0x7f0000000200)=0xe8)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="b7af8d35821b0084fc2f4074", @ANYRES16=r4, @ANYBLOB="00012abd7000fedbdf250600000006000e00010000000c0016000800000000000000080009000400000005ff0f0000000000000021000000000014001f00ff020000000000000000000000000001050005000100000014002000fe01"], 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x40000)
syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r2)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r2)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r5, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xab}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004041}, 0x800)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040081}, 0x4010)

09:02:11 executing program 1:
futex(0x0, 0xb, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0)

09:02:11 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async, rerun: 32)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (rerun: 32)

09:02:11 executing program 0:
futex(0x0, 0xb, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0)

09:02:11 executing program 2:
futex(0x0, 0xb, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0)

09:02:11 executing program 0:
futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000000080)=0xffffffff, 0x0)

09:02:11 executing program 2:
futex(0x0, 0xb, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0)

09:02:11 executing program 0:
futex(0x0, 0xb, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0)

09:02:11 executing program 2:
futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=0xffffffff, 0x0)

09:02:11 executing program 0:
futex(0x0, 0xb, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080), 0x0)

09:02:11 executing program 2:
futex(0x0, 0xb, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0)

09:02:11 executing program 0:
futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=0xffffffff, 0x0)

09:02:11 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000240), 0x4) (async)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x18, 0x0, 0x0)
connect$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r1, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20000820) (async)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@ipv4}}, &(0x7f0000000200)=0xe8) (async)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="b7af8d35821b0084fc2f4074", @ANYRES16=r4, @ANYBLOB="00012abd7000fedbdf250600000006000e00010000000c0016000800000000000000080009000400000005ff0f0000000000000021000000000014001f00ff020000000000000000000000000001050005000100000014002000fe01"], 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r2)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r2)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r5, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xab}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004041}, 0x800)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040081}, 0x4010)

09:02:11 executing program 0:
futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0)

09:02:11 executing program 2:
futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=0xffffffff, 0x0)

09:02:11 executing program 0:
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0})
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x400101, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000800), 0x4)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {r0, r1}}, './file0\x00'})
r4 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r4)

09:02:11 executing program 2:
futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0)

09:02:11 executing program 0:
futex(0x0, 0xb, 0x0, 0x0, 0x0, 0x0)

09:02:11 executing program 2:
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0}) (async)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x400101, 0x0) (async)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000800), 0x4)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {r0, r1}}, './file0\x00'}) (async)
r4 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r4)

09:02:11 executing program 3:
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0)

09:02:11 executing program 0:
futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0)

09:02:11 executing program 2:
futex(0x0, 0xb, 0x0, 0x0, 0x0, 0x0)

09:02:11 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000140), 0x8) (async)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async, rerun: 32)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async, rerun: 32)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000040), 0x8) (async, rerun: 64)
connect$bt_sco(r1, &(0x7f0000000100), 0x8) (async, rerun: 64)
connect$bt_sco(r1, &(0x7f00000000c0), 0x8) (async, rerun: 32)
connect$bt_sco(r1, &(0x7f0000000180), 0xfffffffffffffd9b) (rerun: 32)

09:02:11 executing program 0:
socket$igmp6(0xa, 0x3, 0x2) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0)

09:02:11 executing program 2:
futex(0x0, 0xb, 0x0, 0x0, 0x0, 0x0)

09:02:11 executing program 2:
futex(0x0, 0xb, 0x0, 0x0, 0x0, 0x0)

09:02:11 executing program 0:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0)

09:02:11 executing program 3:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x80086601, 0x0)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000000c0)={0x40000000})
r3 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000002c0))
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2)

09:02:11 executing program 2:
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:11 executing program 0:
futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000000080), 0x0)

09:02:11 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0)

09:02:11 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x80086601, 0x0) (async)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000000c0)={0x40000000}) (async)
r3 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000002c0))
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2)

09:02:11 executing program 0:
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:11 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0)

09:02:12 executing program 1:
r0 = socket(0x18, 0x0, 0x0)
accept4$tipc(r0, 0x0, 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x20000005)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8, <r4=>0x0}, 0x8)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0xffffffe1, 0x0, 0x1, 0x5, '\x00', 0x0, r3, 0x5, 0x0, 0x4}, 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x9f}, 0x8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x3, '\x00', 0x0, r3, 0x0, 0x2, 0x2}, 0x48)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r4, 0x4)

09:02:12 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_io_uring_setup(0xf70, &(0x7f0000000000)={0x0, 0xd404, 0x200, 0x1, 0x2fc}, &(0x7f0000000080), &(0x7f00000000c0))
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)

09:02:12 executing program 3:
syz_io_uring_setup(0x5668, &(0x7f0000000040)={0x0, 0x6130, 0x8, 0x0, 0x218}, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_io_uring_setup(0x99, &(0x7f0000000140)={0x0, 0x2f2b, 0x4, 0x0, 0x14b}, &(0x7f00000001c0), &(0x7f0000000200)=<r1=>0x0)
r2 = epoll_create1(0x80000)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd=r2, 0xfffffffffffffffa, {0x0, r3}, 0x2a9865c3, 0x4, 0x1})
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r5 = io_uring_setup(0x64d, &(0x7f0000000280)={0x0, 0xcf69, 0x4, 0x0, 0x1a9})
syz_io_uring_setup(0x1219, &(0x7f0000000300)={0x0, 0x436d, 0x40, 0x0, 0x216, 0x0, r5}, &(0x7f0000000380), &(0x7f00000003c0))
getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, 0x0, &(0x7f0000000540))
connect$bt_sco(r4, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)

09:02:12 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0xa, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:12 executing program 0:
syz_clone(0x90000000, &(0x7f0000000000)="c801b54c3b66ef39d0a6564b1e20916ab469a295503bd35170ee479cefdd570706cf39222291c9abf172d95c88b5abddcd84f2572677f78b25a789ef8111bca6349707f473179bf6db58fa7765cb737813fa99320d184b18da3a7df43d31092d5abbb97e14ba1c613c6fb660e1b6663371cf19ebca446827c4f7bd8b9554978834e833040117084535ed43d6b583d444aaac1e19b508bc88498644db0d32796159198f632954b5554cc3f02b7e6b023b03e2eeb11bc94462bcf3c3fe816c9aa8f5d8c4430b2cc4f751030ff04303f2d680e296eed4301095c27e0e00bbe6252ddd4ed1b146d3316c78d41635", 0xec, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="49becbe85e988ed9d4f0823b68eca1cab95f47c0a57d7122016a300e4dc999ef3a420054142742f54ca8930120ce5a8272dae8499cbce12dffeea374251b9b6c9151f12c55e0b7359e04236436cf2fd608ce013729c3c956ce17973bdb1d3f1945eda8ca72fcb6ccb6880428b302d88036600ca588b9d5c7b8e6bbaa701c3ffc20fc907f0bad1343f60fd38ca72e66bd035611ae216c1349")
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:12 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_io_uring_setup(0xf70, &(0x7f0000000000)={0x0, 0xd404, 0x200, 0x1, 0x2fc}, &(0x7f0000000080), &(0x7f00000000c0))
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
socket$igmp6(0xa, 0x3, 0x2) (async)
syz_io_uring_setup(0xf70, &(0x7f0000000000)={0x0, 0xd404, 0x200, 0x1, 0x2fc}, &(0x7f0000000080), &(0x7f00000000c0)) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)

09:02:12 executing program 1:
bpf$BPF_BTF_GET_FD_BY_ID(0xa, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:12 executing program 0:
r0 = socket(0x18, 0x0, 0x0)
accept4$tipc(r0, 0x0, 0x0, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x20000005)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8, <r4=>0x0}, 0x8)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0xffffffe1, 0x0, 0x1, 0x5, '\x00', 0x0, r3, 0x5, 0x0, 0x4}, 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x9f}, 0x8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x3, '\x00', 0x0, r3, 0x0, 0x2, 0x2}, 0x48)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r4, 0x4)
socket(0x18, 0x0, 0x0) (async)
accept4$tipc(r0, 0x0, 0x0, 0x0) (async)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x20000005) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8}, 0x8) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0xffffffe1, 0x0, 0x1, 0x5, '\x00', 0x0, r3, 0x5, 0x0, 0x4}, 0x48) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x9f}, 0x8) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x3, '\x00', 0x0, r3, 0x0, 0x2, 0x2}, 0x48) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r4, 0x4) (async)

09:02:12 executing program 1:
syz_clone(0x90000000, &(0x7f0000000000)="c801b54c3b66ef39d0a6564b1e20916ab469a295503bd35170ee479cefdd570706cf39222291c9abf172d95c88b5abddcd84f2572677f78b25a789ef8111bca6349707f473179bf6db58fa7765cb737813fa99320d184b18da3a7df43d31092d5abbb97e14ba1c613c6fb660e1b6663371cf19ebca446827c4f7bd8b9554978834e833040117084535ed43d6b583d444aaac1e19b508bc88498644db0d32796159198f632954b5554cc3f02b7e6b023b03e2eeb11bc94462bcf3c3fe816c9aa8f5d8c4430b2cc4f751030ff04303f2d680e296eed4301095c27e0e00bbe6252ddd4ed1b146d3316c78d41635", 0xec, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="49becbe85e988ed9d4f0823b68eca1cab95f47c0a57d7122016a300e4dc999ef3a420054142742f54ca8930120ce5a8272dae8499cbce12dffeea374251b9b6c9151f12c55e0b7359e04236436cf2fd608ce013729c3c956ce17973bdb1d3f1945eda8ca72fcb6ccb6880428b302d88036600ca588b9d5c7b8e6bbaa701c3ffc20fc907f0bad1343f60fd38ca72e66bd035611ae216c1349") (async, rerun: 32)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32)

09:02:12 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0xa, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:12 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000040), 0x4)
r2 = socket(0x2, 0xa, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r2)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4)

09:02:12 executing program 2:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/107, 0x6b, <r1=>0x0, &(0x7f00000000c0)=""/107, 0x6b}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080))
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48)
r4 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)={0x6000001d})

09:02:12 executing program 0:
bpf$BPF_BTF_GET_FD_BY_ID(0xa, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:12 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000040), 0x4) (async)
r2 = socket(0x2, 0xa, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r2)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4)

09:02:12 executing program 0:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/107, 0x6b, <r1=>0x0, &(0x7f00000000c0)=""/107, 0x6b}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080))
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48)
r4 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)={0x6000001d})

09:02:12 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0xa, 0x0, 0x0)

09:02:12 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
getsockopt$MRT6(r0, 0x29, 0xce, &(0x7f0000000000), &(0x7f0000000040)=0x2b)

09:02:12 executing program 0:
bpf$BPF_BTF_GET_FD_BY_ID(0xa, 0x0, 0x0)

09:02:12 executing program 2:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/107, 0x6b, <r1=>0x0, &(0x7f00000000c0)=""/107, 0x6b}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080))
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48)
r4 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)={0x6000001d})

09:02:12 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
getsockopt$MRT6(r0, 0x29, 0xce, &(0x7f0000000000), &(0x7f0000000040)=0x2b) (async)
getsockopt$MRT6(r0, 0x29, 0xce, &(0x7f0000000000), &(0x7f0000000040)=0x2b)

09:02:12 executing program 0:
bpf$BPF_BTF_GET_FD_BY_ID(0xa, 0x0, 0x0)

09:02:12 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@empty, @in=@initdev}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8)

09:02:12 executing program 2:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/107, 0x6b, <r1=>0x0, &(0x7f00000000c0)=""/107, 0x6b}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r3 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48)
r4 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)={0x6000001d})

09:02:12 executing program 0:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/107, 0x6b, <r1=>0x0, &(0x7f00000000c0)=""/107, 0x6b}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080))
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48)
r4 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)={0x6000001d})

09:02:12 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@empty, @in=@initdev}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8)

09:02:12 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4)

09:02:12 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$MRT6(r1, 0x29, 0xce, &(0x7f0000000000), &(0x7f0000000080)=0x4)
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0)

[  993.130942][ T1352] ieee802154 phy0 wpan0: encryption failed: -22
[  993.134492][ T1352] ieee802154 phy1 wpan1: encryption failed: -22
09:02:12 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4)

09:02:12 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)
r1 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$MRT6(r1, 0x29, 0xce, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async)
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0)

09:02:12 executing program 2:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/107, 0x6b, <r1=>0x0, &(0x7f00000000c0)=""/107, 0x6b}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080))
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000240)={0x6000001d})

09:02:12 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x14, r1, 0x300, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r1, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7fff}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x40000)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1f}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_LINK={0x8, 0x1, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x1)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x30dc, '\x00', r5, r7, 0x0, 0x5}, 0x48)

09:02:12 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)

09:02:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x14, r1, 0x300, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4080) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r4 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r5=>0x0}) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r1, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7fff}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x40000)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) (async)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1f}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_LINK={0x8, 0x1, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x1) (async)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x30dc, '\x00', r5, r7, 0x0, 0x5}, 0x48)

09:02:12 executing program 0:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/107, 0x6b, <r1=>0x0, &(0x7f00000000c0)=""/107, 0x6b}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080))
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000240)={0x6000001d})

[  993.290528][ T5209] Bluetooth: hci3: command 0x041b tx timeout
09:02:13 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
socket$igmp6(0xa, 0x3, 0x2) (async)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)

09:02:13 executing program 2:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/107, 0x6b, <r1=>0x0, &(0x7f00000000c0)=""/107, 0x6b}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080))
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000240)={0x6000001d})

09:02:13 executing program 3:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x4a200, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}}, 0x40000)
sched_getattr(0xffffffffffffffff, &(0x7f0000000000)={0x38}, 0x38, 0x0)

09:02:13 executing program 2:
syz_io_uring_setup(0x5668, &(0x7f0000000040)={0x0, 0x6130, 0x8, 0x0, 0x218}, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100)) (async)
syz_io_uring_setup(0x99, &(0x7f0000000140)={0x0, 0x2f2b, 0x4, 0x0, 0x14b}, &(0x7f00000001c0), &(0x7f0000000200)=<r1=>0x0) (async, rerun: 64)
r2 = epoll_create1(0x80000) (async, rerun: 64)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd=r2, 0xfffffffffffffffa, {0x0, r3}, 0x2a9865c3, 0x4, 0x1}) (async)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32)
r5 = io_uring_setup(0x64d, &(0x7f0000000280)={0x0, 0xcf69, 0x4, 0x0, 0x1a9}) (rerun: 32)
syz_io_uring_setup(0x1219, &(0x7f0000000300)={0x0, 0x436d, 0x40, 0x0, 0x216, 0x0, r5}, &(0x7f0000000380), &(0x7f00000003c0)) (async)
getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)
connect$bt_sco(r4, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)

09:02:13 executing program 3:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/107, 0x6b, <r1=>0x0, &(0x7f00000000c0)=""/107, 0x6b}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080))
r4 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)={0x6000001d})

09:02:13 executing program 0:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x4a200, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}}, 0x40000)
sched_getattr(0xffffffffffffffff, &(0x7f0000000000)={0x38}, 0x38, 0x0)

09:02:13 executing program 0:
r0 = epoll_create1(0x80000)
epoll_pwait(r0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0xfff, &(0x7f0000000180)={[0x84d]}, 0x8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', <r2=>0x0, 0x29, 0x7f, 0x1f, 0x40, 0x42, @mcast2, @loopback, 0x40, 0x7800, 0x0, 0x72}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000200)={'gretap0\x00', r2, 0x80, 0x700, 0x9d9, 0x6, {{0x1a, 0x4, 0x2, 0xe, 0x68, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @local, {[@generic={0x7, 0x10, "7f44a60c427963e7a98d8f081ba9"}, @timestamp={0x44, 0xc, 0x22, 0x0, 0x6, [0x0, 0x3ff]}, @generic={0x44, 0x12, "60a57973bbc82779f6663407c227e0cd"}, @ssrr={0x89, 0x7, 0xc1, [@broadcast]}, @rr={0x7, 0x1f, 0x2b, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x42}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @local, @remote]}]}}}}})
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)

09:02:13 executing program 3:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001280)=0xffffffffffffffff, 0x4)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001200)={r0, 0x20, &(0x7f00000011c0)={&(0x7f00000000c0)=""/202, 0xca, <r2=>0x0, &(0x7f00000001c0)=""/4096, 0x1000}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001240)=r2, 0x4)
ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000080)={0xc})

09:02:13 executing program 1:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/107, 0x6b, <r1=>0x0, &(0x7f00000000c0)=""/107, 0x6b}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = epoll_create(0x1f)
r3 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x6000001d})

09:02:13 executing program 2:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
connect$bt_sco(r2, &(0x7f0000000280), 0x8)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r3, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0xf3e, @media='ib\x00'}}}}, 0x68}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r3, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x586c, @link='syz1\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x24040005)

09:02:13 executing program 3:
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:13 executing program 3:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001280)=0xffffffffffffffff, 0x4)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001200)={r0, 0x20, &(0x7f00000011c0)={&(0x7f00000000c0)=""/202, 0xca, <r2=>0x0, &(0x7f00000001c0)=""/4096, 0x1000}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001240)=r2, 0x4)
ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000080)={0xc})

09:02:13 executing program 2:
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000540))
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)

09:02:13 executing program 2:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
connect$bt_sco(r2, &(0x7f0000000280), 0x8)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r3, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0xf3e, @media='ib\x00'}}}}, 0x68}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r3, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x586c, @link='syz1\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x24040005)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async)
connect$bt_sco(r2, &(0x7f0000000280), 0x8) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) (async)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r3, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0xf3e, @media='ib\x00'}}}}, 0x68}}, 0x0) (async)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r3, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x586c, @link='syz1\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x24040005) (async)

09:02:13 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0xffffffffffffffff}}, './file0\x00'})
connect$bt_sco(r1, &(0x7f0000000040), 0x8)

09:02:13 executing program 2:
r0 = socket(0x25, 0x1, 0x0)
getpeername$tipc(r0, 0x0, 0x0)
setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e24, 0xffff, @mcast1, 0x7}, {0xa, 0x4e23, 0x800, @dev={0xfe, 0x80, '\x00', 0x43}, 0x8}, 0xffffffffffffffff, {[0x9, 0x8, 0x3ff, 0x1, 0x87, 0x3, 0x1, 0x2]}}, 0xffffffffffffff48)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:13 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000), 0x8)

09:02:13 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0xffffffffffffffff}}, './file0\x00'})
connect$bt_sco(r1, &(0x7f0000000040), 0x8)

09:02:13 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000), 0x8)

09:02:13 executing program 2:
r0 = getpid()
sched_getattr(r0, &(0x7f0000000040)={0x38}, 0x38, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:13 executing program 2:
r0 = socket(0x25, 0x1, 0x0)
getpeername$tipc(r0, 0x0, 0x0)
setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e24, 0xffff, @mcast1, 0x7}, {0xa, 0x4e23, 0x800, @dev={0xfe, 0x80, '\x00', 0x43}, 0x8}, 0xffffffffffffffff, {[0x9, 0x8, 0x3ff, 0x1, 0x87, 0x3, 0x1, 0x2]}}, 0xffffffffffffff48)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
socket(0x25, 0x1, 0x0) (async)
getpeername$tipc(r0, 0x0, 0x0) (async)
setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e24, 0xffff, @mcast1, 0x7}, {0xa, 0x4e23, 0x800, @dev={0xfe, 0x80, '\x00', 0x43}, 0x8}, 0xffffffffffffffff, {[0x9, 0x8, 0x3ff, 0x1, 0x87, 0x3, 0x1, 0x2]}}, 0xffffffffffffff48) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) (async)

09:02:13 executing program 3:
r0 = getpid()
sched_getattr(r0, &(0x7f0000000040)={0x38}, 0x38, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:13 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket(0xa, 0x5827d03d922afa31, 0x3f)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000850}, 0x20040000)
bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>r0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="cc5b35856fbc59ae541c687394bc7b5807e8597e08f023469fce533e11140ea427b648360d6a6e9bb8bff29eaff5bcdc74e0b0ee18b6cd16e68df77823faff65b862c9720f16c1f312293f01996303854844e050ffaabe339afb21df0f09e07ef1733649db7d99ab973ac8dd95c468d247b5dec13c077a156b7fe1d323"])
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)={<r4=>0x0})
socketpair(0xa, 0x80000, 0x1, &(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$bt_sco(r5, &(0x7f0000000200), 0x8)
ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000180)={r4})
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x101}, {0xa, 0x4e23, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6b}, 0xffffffffffffffff, {[0xbee1, 0x20000, 0x0, 0x81, 0x2, 0xffffffff, 0x1, 0x15]}}, 0x5c)

09:02:13 executing program 2:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/107, 0x6b, <r1=>0x0, &(0x7f00000000c0)=""/107, 0x6b}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = epoll_create(0x1f)
r3 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x6000001d})

09:02:13 executing program 2:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/107, 0x6b, <r1=>0x0, &(0x7f00000000c0)=""/107, 0x6b}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = epoll_create(0x1f)
r3 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x6000001d})

[  994.132084][ T5213] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  994.136665][ T5213] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  994.142251][ T5213] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
09:02:13 executing program 2:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/107, 0x6b, <r1=>0x0, &(0x7f00000000c0)=""/107, 0x6b}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = epoll_create(0x1f)
r3 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x6000001d})

[  994.151294][ T5213] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  994.157984][ T5213] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  994.161458][ T5213] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
09:02:13 executing program 2:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0xffffffff, 0x6, 0x347, 0xabc551848f4b2cce, 0xffffffffffffffff, 0x5, '\x00', 0x0, r0, 0x4, 0x2, 0x5}, 0x48)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', <r2=>0x0, 0x2f, 0xce, 0x1, 0x401, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x700, 0x8, 0x7fff, 0x13}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x9, '\x00', r2, r0, 0x4, 0x4, 0x1}, 0x48)

09:02:13 executing program 2:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/107, 0x6b, <r1=>0x0, &(0x7f00000000c0)=""/107, 0x6b}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000080))
r3 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x6000001d})

09:02:14 executing program 2:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/107, 0x6b, <r1=>0x0, &(0x7f00000000c0)=""/107, 0x6b}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = epoll_create(0x1f)
r3 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x6000001d})

[  994.367228][T20604] chnl_net:caif_netlink_parms(): no params data found
09:02:14 executing program 2:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/107, 0x6b, <r1=>0x0, &(0x7f00000000c0)=""/107, 0x6b}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000080))
r3 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x6000001d})

09:02:14 executing program 0:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0xffffffff, 0x6, 0x347, 0xabc551848f4b2cce, 0xffffffffffffffff, 0x5, '\x00', 0x0, r0, 0x4, 0x2, 0x5}, 0x48)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', <r2=>0x0, 0x2f, 0xce, 0x1, 0x401, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x700, 0x8, 0x7fff, 0x13}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x9, '\x00', r2, r0, 0x4, 0x4, 0x1}, 0x48)

09:02:14 executing program 0:
r0 = epoll_create1(0x80000)
epoll_pwait(r0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0xfff, &(0x7f0000000180)={[0x84d]}, 0x8) (async)
epoll_pwait(r0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0xfff, &(0x7f0000000180)={[0x84d]}, 0x8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x7f, 0x1f, 0x40, 0x42, @mcast2, @loopback, 0x40, 0x7800, 0x0, 0x72}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', <r2=>0x0, 0x29, 0x7f, 0x1f, 0x40, 0x42, @mcast2, @loopback, 0x40, 0x7800, 0x0, 0x72}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000200)={'gretap0\x00', r2, 0x80, 0x700, 0x9d9, 0x6, {{0x1a, 0x4, 0x2, 0xe, 0x68, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @local, {[@generic={0x7, 0x10, "7f44a60c427963e7a98d8f081ba9"}, @timestamp={0x44, 0xc, 0x22, 0x0, 0x6, [0x0, 0x3ff]}, @generic={0x44, 0x12, "60a57973bbc82779f6663407c227e0cd"}, @ssrr={0x89, 0x7, 0xc1, [@broadcast]}, @rr={0x7, 0x1f, 0x2b, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x42}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @local, @remote]}]}}}}})
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)

09:02:14 executing program 2:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0xffffffff, 0x6, 0x347, 0xabc551848f4b2cce, 0xffffffffffffffff, 0x5, '\x00', 0x0, r0, 0x4, 0x2, 0x5}, 0x48) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', <r2=>0x0, 0x2f, 0xce, 0x1, 0x401, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x700, 0x8, 0x7fff, 0x13}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x9, '\x00', r2, r0, 0x4, 0x4, 0x1}, 0x48)

09:02:14 executing program 1:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/107, 0x6b, <r1=>0x0, &(0x7f00000000c0)=""/107, 0x6b}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000080))
r3 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x6000001d})

09:02:14 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r1 = socket(0xa, 0x5827d03d922afa31, 0x3f)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000850}, 0x20040000)
bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000040)) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>r0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="cc5b35856fbc59ae541c687394bc7b5807e8597e08f023469fce533e11140ea427b648360d6a6e9bb8bff29eaff5bcdc74e0b0ee18b6cd16e68df77823faff65b862c9720f16c1f312293f01996303854844e050ffaabe339afb21df0f09e07ef1733649db7d99ab973ac8dd95c468d247b5dec13c077a156b7fe1d323"]) (async, rerun: 64)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)={<r4=>0x0}) (async, rerun: 64)
socketpair(0xa, 0x80000, 0x1, &(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$bt_sco(r5, &(0x7f0000000200), 0x8) (async)
ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000180)={r4})
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x101}, {0xa, 0x4e23, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6b}, 0xffffffffffffffff, {[0xbee1, 0x20000, 0x0, 0x81, 0x2, 0xffffffff, 0x1, 0x15]}}, 0x5c)

09:02:14 executing program 0:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r0, 0x20, &(0x7f0000000180)={&(0x7f0000000000)=""/119, 0x77, <r1=>0x0, &(0x7f0000000080)=""/224, 0xe0}}, 0x10)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r1, 0x4)

09:02:14 executing program 2:
clock_adjtime(0x2, &(0x7f0000000000)={0x2, 0x3ff, 0xfffffffffffffffd, 0x4, 0x7, 0x6, 0x0, 0xa16, 0x3, 0x100000000, 0x3928, 0x8000, 0x8, 0x0, 0xe1, 0x0, 0x3f, 0x1, 0x0, 0x8, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x1000, 0x5})
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x15}, @GTPA_TID={0xc}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_VERSION={0x8}]}, 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffff67, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000240), 0x4)

09:02:14 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

[  994.658620][T20646] netlink: 'syz-executor.2': attribute type 7 has an invalid length.
09:02:14 executing program 1:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) (async)
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r0, 0x20, &(0x7f0000000180)={&(0x7f0000000000)=""/119, 0x77, <r1=>0x0, &(0x7f0000000080)=""/224, 0xe0}}, 0x10)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r1, 0x4)

[  994.665157][T20646] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
09:02:14 executing program 0:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/107, 0x6b, <r1=>0x0, &(0x7f00000000c0)=""/107, 0x6b}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4)
r2 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080))
r3 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x6000001d})

09:02:14 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)

09:02:14 executing program 2:
clock_adjtime(0x2, &(0x7f0000000000)={0x2, 0x3ff, 0xfffffffffffffffd, 0x4, 0x7, 0x6, 0x0, 0xa16, 0x3, 0x100000000, 0x3928, 0x8000, 0x8, 0x0, 0xe1, 0x0, 0x3f, 0x1, 0x0, 0x8, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x1000, 0x5}) (async)
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x15}, @GTPA_TID={0xc}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_VERSION={0x8}]}, 0x40}}, 0x0) (async)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffff67, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000240), 0x4)

[  994.760925][T20655] netlink: 'syz-executor.2': attribute type 7 has an invalid length.
[  994.763778][T20655] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
09:02:14 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:14 executing program 2:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/107, 0x6b, <r1=>0x0, &(0x7f00000000c0)=""/107, 0x6b}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4)
r2 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080))
r3 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x6000001d})

09:02:14 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004010}, 0x40004)

09:02:14 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0x40305828, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000d80)=""/199, &(0x7f0000000e80)=0xc7)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x9, [@enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x81}, {0xc, 0xff}]}, @struct={0xe, 0x8, 0x0, 0x4, 0x1, 0x50000, [{0x0, 0x3, 0x4}, {0x1, 0x5, 0x10001}, {0xc, 0x0, 0x8001}, {0x4, 0x1, 0x1}, {0x1, 0x5, 0x4}, {0x3, 0x0, 0x5}, {0x5, 0x2, 0x9}, {0x9, 0x2, 0xfffffffd}]}]}, {0x0, [0x30, 0xf2, 0x30, 0x30, 0x5f, 0x0, 0x2e]}}, &(0x7f00000002c0)=""/8, 0xa9, 0x8, 0x1, 0x80000001}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r2, 0x287, '\x00', r1, r3, 0x2, 0x4, 0x2}, 0x48)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f00), r2)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000040)={<r5=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000080)={r5, 0x2})
r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000f40)='ns/uts\x00')
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x44, r4, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8010)
ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000cc0)={<r7=>0x0})
ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000d00)={r7, 0x2})
syz_io_uring_setup(0x49a8, &(0x7f0000000680)={0x0, 0xa26a, 0x10, 0x1, 0x17b, 0x0, r2}, &(0x7f0000000700), &(0x7f0000000740))
syz_io_uring_setup(0x10f9, &(0x7f0000000780)={0x0, 0x89a3, 0x1, 0x0, 0x1f7, 0x0, r2}, &(0x7f0000000800), &(0x7f0000000840))
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x7ff, "5f192f6cba1d295d3c57bb9cdb8637fa3f13a6f7176599859a7da812e2c75cbe"})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:14 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:14 executing program 2:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/107, 0x6b, <r1=>0x0, &(0x7f00000000c0)=""/107, 0x6b}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4)
r2 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080))
r3 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x6000001d})

09:02:14 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x250540, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:14 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0x40305828, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000d80)=""/199, &(0x7f0000000e80)=0xc7)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x9, [@enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x81}, {0xc, 0xff}]}, @struct={0xe, 0x8, 0x0, 0x4, 0x1, 0x50000, [{0x0, 0x3, 0x4}, {0x1, 0x5, 0x10001}, {0xc, 0x0, 0x8001}, {0x4, 0x1, 0x1}, {0x1, 0x5, 0x4}, {0x3, 0x0, 0x5}, {0x5, 0x2, 0x9}, {0x9, 0x2, 0xfffffffd}]}]}, {0x0, [0x30, 0xf2, 0x30, 0x30, 0x5f, 0x0, 0x2e]}}, &(0x7f00000002c0)=""/8, 0xa9, 0x8, 0x1, 0x80000001}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r2, 0x287, '\x00', r1, r3, 0x2, 0x4, 0x2}, 0x48) (async)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f00), r2)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000040)={<r5=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000080)={r5, 0x2})
r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000f40)='ns/uts\x00')
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x44, r4, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8010) (async)
ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000cc0)={<r7=>0x0})
ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000d00)={r7, 0x2})
syz_io_uring_setup(0x49a8, &(0x7f0000000680)={0x0, 0xa26a, 0x10, 0x1, 0x17b, 0x0, r2}, &(0x7f0000000700), &(0x7f0000000740))
syz_io_uring_setup(0x10f9, &(0x7f0000000780)={0x0, 0x89a3, 0x1, 0x0, 0x1f7, 0x0, r2}, &(0x7f0000000800), &(0x7f0000000840)) (async)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x7ff, "5f192f6cba1d295d3c57bb9cdb8637fa3f13a6f7176599859a7da812e2c75cbe"})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:14 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004010}, 0x40004)

09:02:14 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x250540, 0x0) (async, rerun: 32)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) (rerun: 32)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:14 executing program 0:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x9, <r1=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r0, 0x20, &(0x7f00000001c0)={&(0x7f0000000080)=""/178, 0xb2, <r2=>0x0, &(0x7f0000000140)=""/95, 0x5f}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r2, 0x4)

09:02:14 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1)

[  994.975833][   T80] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  994.991200][T20604] bridge0: port 1(bridge_slave_0) entered blocking state
[  994.993817][T20604] bridge0: port 1(bridge_slave_0) entered disabled state
[  994.996409][T20604] bridge_slave_0: entered allmulticast mode
[  995.001575][T20604] bridge_slave_0: entered promiscuous mode
09:02:14 executing program 1:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/107, 0x6b, 0x0, &(0x7f00000000c0)=""/107, 0x6b}}, 0x10)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
r3 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x6000001d})

09:02:14 executing program 0:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/107, 0x6b, <r1=>0x0, &(0x7f00000000c0)=""/107, 0x6b}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4)
r2 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080))
r3 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x6000001d})

[  995.005337][T20604] bridge0: port 2(bridge_slave_1) entered blocking state
[  995.008406][T20604] bridge0: port 2(bridge_slave_1) entered disabled state
09:02:14 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket(0x10, 0x3, 0xb)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x4c}}, 0x0)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8)
connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)=0xfffffed5)
syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r1)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r1)
r3 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8)
r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r5, 0x40305828, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r5, 0x11, 0x1, &(0x7f0000000d80)=""/199, &(0x7f0000000e80)=0xc7)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=""/8, 0xa9, 0x8, 0x1, 0x80000001}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r5, 0x287, '\x00', r4, r6, 0x2, 0x4, 0x2}, 0x48)
setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000280), 0x4)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES16=r2, @ANYBLOB="00f82cbd7000fbdbdf25820000000c0003000100000021000000080009000000000008000100", @ANYRES32=r4, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0)

[  995.016685][T20604] bridge_slave_1: entered allmulticast mode
[  995.027825][T20604] bridge_slave_1: entered promiscuous mode
[  995.037838][   T38] audit: type=1400 audit(1710925334.700:276): avc:  denied  { create } for  pid=20692 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
09:02:14 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1)

09:02:14 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket(0x10, 0x3, 0xb)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x4c}}, 0x0)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8)
connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)=0xfffffed5)
syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r1)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r1)
r3 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8)
r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r5, 0x40305828, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r5, 0x11, 0x1, &(0x7f0000000d80)=""/199, &(0x7f0000000e80)=0xc7)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=""/8, 0xa9, 0x8, 0x1, 0x80000001}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r5, 0x287, '\x00', r4, r6, 0x2, 0x4, 0x2}, 0x48)
setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000280), 0x4)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES16=r2, @ANYBLOB="00f82cbd7000fbdbdf25820000000c0003000100000021000000080009000000000008000100", @ANYRES32=r4, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
socket(0x10, 0x3, 0xb) (async)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x4c}}, 0x0) (async)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) (async)
connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)=0xfffffed5) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r1) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r1) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8) (async)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_ADD_CTX(r5, 0x40305828, 0x0) (async)
getsockopt$bt_sco_SCO_OPTIONS(r5, 0x11, 0x1, &(0x7f0000000d80)=""/199, &(0x7f0000000e80)=0xc7) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=""/8, 0xa9, 0x8, 0x1, 0x80000001}, 0x20) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r5, 0x287, '\x00', r4, r6, 0x2, 0x4, 0x2}, 0x48) (async)
setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000280), 0x4) (async)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES16=r2, @ANYBLOB="00f82cbd7000fbdbdf25820000000c0003000100000021000000080009000000000008000100", @ANYRES32=r4, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)

[  995.058041][   T38] audit: type=1400 audit(1710925334.700:277): avc:  denied  { write } for  pid=20692 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  995.071138][   T38] audit: type=1400 audit(1710925334.700:278): avc:  denied  { connect } for  pid=20692 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
09:02:14 executing program 0:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
r2 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x6000001d})

09:02:14 executing program 2:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x9, <r1=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r0, 0x20, &(0x7f00000001c0)={&(0x7f0000000080)=""/178, 0xb2, <r2=>0x0, &(0x7f0000000140)=""/95, 0x5f}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r2, 0x4)

[  995.080498][   T38] audit: type=1400 audit(1710925334.700:279): avc:  denied  { getopt } for  pid=20692 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
09:02:14 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$MRT6(r1, 0x29, 0xce, &(0x7f0000000000), &(0x7f0000000040)=0x4)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)

09:02:14 executing program 0:
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0xf9, 0x3f, 0xfffffffc, 0x48, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, 0x8000, 0x80, 0x599, 0x1}})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xd8ff, <r0=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r0, 0x4)

09:02:14 executing program 1:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
r2 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x6000001d})

09:02:14 executing program 2:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

[  995.162881][   T80] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
09:02:14 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$MRT6(r1, 0x29, 0xce, &(0x7f0000000000), &(0x7f0000000040)=0x4)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)

09:02:14 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)

09:02:14 executing program 0:
r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
r2 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x6000001d})

[  995.187497][T20604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
09:02:14 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0xf9, 0x3f, 0xfffffffc, 0x48, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, 0x8000, 0x80, 0x599, 0x1}})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xd8ff, <r0=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r0, 0x4)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0xf9, 0x3f, 0xfffffffc, 0x48, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, 0x8000, 0x80, 0x599, 0x1}}) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xd8ff}, 0x8) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r0, 0x4) (async)

[  995.198059][T20604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
09:02:14 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r1 = socket$inet6(0xa, 0x80004, 0x1)
setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00', 0x5}, {0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x0, {[0x8, 0x10001, 0x0, 0x2, 0x1ff, 0x4, 0x10000, 0x8]}}, 0x5c)

09:02:14 executing program 2:
r0 = gettid()
r1 = getpid()
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x48)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0xb0000, 0x0)
kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000180)={0xffffffffffffffff, r3, 0x8})
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x48)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r4, &(0x7f0000000080)={0xffffffffffffffff, r5, 0x9})
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r6, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:14 executing program 0:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x3, 0x9, 0x6, 0x40, 0xffffffffffffffff, 0x3, '\x00', 0x0, r0, 0x4, 0x2, 0x5, 0x5}, 0x48)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', <r2=>0x0, 0x29, 0x8, 0x1, 0x40, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, 0x80, 0x80, 0x1, 0x7}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x5, '\x00', r2, 0xffffffffffffffff, 0x3, 0x4}, 0x48)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r0, 0x20, &(0x7f0000000240)={&(0x7f0000000140)=""/5, 0x5, <r3=>0x0, &(0x7f0000000180)=""/167, 0xa7}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r3, 0x4)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800001b", @ANYRES16=r4, @ANYBLOB="010027bd7000ffdbdf250200000014002000ff010000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4001)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

[  995.288086][   T80] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
09:02:14 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
r2 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x6000001d})

09:02:14 executing program 0:
r0 = gettid() (async)
r1 = getpid()
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x48)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0xb0000, 0x0)
kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000180)={0xffffffffffffffff, r3, 0x8}) (async)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x48)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r4, &(0x7f0000000080)={0xffffffffffffffff, r5, 0x9}) (async)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r6, 0x11, 0x1, 0x0, &(0x7f0000000540))

[  995.314100][T20604] team0: Port device team_slave_0 added
[  995.318149][T20604] team0: Port device team_slave_1 added
09:02:15 executing program 0:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x3, 0x9, 0x6, 0x40, 0xffffffffffffffff, 0x3, '\x00', 0x0, r0, 0x4, 0x2, 0x5, 0x5}, 0x48)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', <r2=>0x0, 0x29, 0x8, 0x1, 0x40, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, 0x80, 0x80, 0x1, 0x7}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x5, '\x00', r2, 0xffffffffffffffff, 0x3, 0x4}, 0x48) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r0, 0x20, &(0x7f0000000240)={&(0x7f0000000140)=""/5, 0x5, <r3=>0x0, &(0x7f0000000180)=""/167, 0xa7}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r3, 0x4) (async)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800001b", @ANYRES16=r4, @ANYBLOB="010027bd7000ffdbdf250200000014002000ff010000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4001) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:15 executing program 1:
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000500)='%pi6   \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)='%pI4   \x00'}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', <r1=>0x0, 0x0, 0x7d, 0x81, 0x9, 0x6, @private2, @mcast1, 0x8000, 0x7, 0x2, 0x5}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x48)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4)
bind$bt_sco(r2, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
r4 = socket$nl_generic(0x2, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x20040081)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x20, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}]}]}, 0x20}}, 0x0)
connect$bt_sco(r3, &(0x7f0000000380)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001063c7d57f9f6d07dd9c012324fc0119bb383fc27f5032413c4e47982f5c9d3039214c0d7aa51c05739cebe334065c9904c43574623d74f4a41a717211d88d26ad785f782e4d22636c5e2fdc44fc473471deae4cd678529f2bb79ded4f8fb6b1c440b790ab326ec81b6cde37544bd7e2a3f7b7801fdd4d", @ANYRES16=r6, @ANYBLOB="00032bbd7000fbdbdf250600000008000300070000000500050040000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4004841)
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:15 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0xb, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

[  995.374160][ T5213] Bluetooth: hci3: command 0x041b tx timeout
09:02:15 executing program 0:
r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
r2 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x6000001d})

09:02:15 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)
r1 = socket$inet6(0xa, 0x80004, 0x1)
setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00', 0x5}, {0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x0, {[0x8, 0x10001, 0x0, 0x2, 0x1ff, 0x4, 0x10000, 0x8]}}, 0x5c)

[  995.385949][   T80] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
09:02:15 executing program 0:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r0, 0x20, &(0x7f0000000100)={&(0x7f0000000000)=""/84, 0x54, <r1=>0x0, &(0x7f0000000080)=""/72, 0x48}}, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, r0, 0x4, 0x4, 0x5}, 0x48)
r3 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8)
r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r5, 0x40305828, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r5, 0x11, 0x1, &(0x7f0000000d80)=""/199, &(0x7f0000000e80)=0xc7)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x9, [@enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x81}, {0xc, 0xff}]}, @struct={0xe, 0x8, 0x0, 0x4, 0x1, 0x50000, [{0x0, 0x3, 0x4}, {0x1, 0x5, 0x10001}, {0xc, 0x0, 0x8001}, {0x4, 0x1, 0x1}, {0x1, 0x5, 0x4}, {0x3, 0x0, 0x5}, {0x5, 0x2, 0x9}, {0x9, 0x2, 0xfffffffd}]}]}, {0x0, [0x30, 0xf2, 0x30, 0x30, 0x5f, 0x0, 0x2e]}}, &(0x7f00000002c0)=""/8, 0xa9, 0x8, 0x1, 0x80000001}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r5, 0x287, '\x00', r4, r6, 0x2, 0x4, 0x2}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, r2, 0x5, '\x00', r4, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x48)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'sit0\x00', <r7=>0x0, 0x10, 0x80, 0x9, 0xffff, {{0x18, 0x4, 0x1, 0xf, 0x60, 0x66, 0x0, 0x3, 0x0, 0x0, @local, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x3c, 0x73, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x37}, 0xffffffff}, {@rand_addr=0x64010101, 0x4}, {@loopback, 0x5}, {@private=0xa010100, 0xffffff7f}, {@empty, 0x4f9}, {@remote, 0x80}]}, @generic={0x44, 0xe, "1027e649f23ee79c6bae2852"}]}}}}})
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x528, 0x0, r2, 0x1, '\x00', r7, r8, 0x2, 0x4, 0x3}, 0x48)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r1, 0x4)

09:02:15 executing program 1:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
r2 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x6000001d})

09:02:15 executing program 0:
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000500)='%pi6   \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)='%pI4   \x00'}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', <r1=>0x0, 0x0, 0x7d, 0x81, 0x9, 0x6, @private2, @mcast1, 0x8000, 0x7, 0x2, 0x5}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x48)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4)
bind$bt_sco(r2, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
r4 = socket$nl_generic(0x2, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x20040081)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x20, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}]}]}, 0x20}}, 0x0)
connect$bt_sco(r3, &(0x7f0000000380)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001063c7d57f9f6d07dd9c012324fc0119bb383fc27f5032413c4e47982f5c9d3039214c0d7aa51c05739cebe334065c9904c43574623d74f4a41a717211d88d26ad785f782e4d22636c5e2fdc44fc473471deae4cd678529f2bb79ded4f8fb6b1c440b790ab326ec81b6cde37544bd7e2a3f7b7801fdd4d", @ANYRES16=r6, @ANYBLOB="00032bbd7000fbdbdf250600000008000300070000000500050040000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4004841)
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, 0x0, &(0x7f0000000540))
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000500)='%pi6   \x00'}, 0x20) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)='%pI4   \x00'}, 0x20) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x0, 0x7d, 0x81, 0x9, 0x6, @private2, @mcast1, 0x8000, 0x7, 0x2, 0x5}}) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x48) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180), 0x4) (async)
bind$bt_sco(r2, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async)
socket$nl_generic(0x2, 0x3, 0x10) (async)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x20040081) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x20, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}]}]}, 0x20}}, 0x0) (async)
connect$bt_sco(r3, &(0x7f0000000380)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001063c7d57f9f6d07dd9c012324fc0119bb383fc27f5032413c4e47982f5c9d3039214c0d7aa51c05739cebe334065c9904c43574623d74f4a41a717211d88d26ad785f782e4d22636c5e2fdc44fc473471deae4cd678529f2bb79ded4f8fb6b1c440b790ab326ec81b6cde37544bd7e2a3f7b7801fdd4d", @ANYRES16=r6, @ANYBLOB="00032bbd7000fbdbdf250600000008000300070000000500050040000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4004841) (async)
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)

[  995.454621][T20604] batman_adv: batadv0: Adding interface: batadv_slave_0
09:02:15 executing program 2:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r0, 0x20, &(0x7f0000000100)={&(0x7f0000000000)=""/84, 0x54, <r1=>0x0, &(0x7f0000000080)=""/72, 0x48}}, 0x10) (async)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, r0, 0x4, 0x4, 0x5}, 0x48)
r3 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8) (async)
r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r5, 0x40305828, 0x0) (async)
getsockopt$bt_sco_SCO_OPTIONS(r5, 0x11, 0x1, &(0x7f0000000d80)=""/199, &(0x7f0000000e80)=0xc7) (async)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x9, [@enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x81}, {0xc, 0xff}]}, @struct={0xe, 0x8, 0x0, 0x4, 0x1, 0x50000, [{0x0, 0x3, 0x4}, {0x1, 0x5, 0x10001}, {0xc, 0x0, 0x8001}, {0x4, 0x1, 0x1}, {0x1, 0x5, 0x4}, {0x3, 0x0, 0x5}, {0x5, 0x2, 0x9}, {0x9, 0x2, 0xfffffffd}]}]}, {0x0, [0x30, 0xf2, 0x30, 0x30, 0x5f, 0x0, 0x2e]}}, &(0x7f00000002c0)=""/8, 0xa9, 0x8, 0x1, 0x80000001}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r5, 0x287, '\x00', r4, r6, 0x2, 0x4, 0x2}, 0x48) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, r2, 0x5, '\x00', r4, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x48) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'sit0\x00', <r7=>0x0, 0x10, 0x80, 0x9, 0xffff, {{0x18, 0x4, 0x1, 0xf, 0x60, 0x66, 0x0, 0x3, 0x0, 0x0, @local, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x3c, 0x73, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x37}, 0xffffffff}, {@rand_addr=0x64010101, 0x4}, {@loopback, 0x5}, {@private=0xa010100, 0xffffff7f}, {@empty, 0x4f9}, {@remote, 0x80}]}, @generic={0x44, 0xe, "1027e649f23ee79c6bae2852"}]}}}}}) (async)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x528, 0x0, r2, 0x1, '\x00', r7, r8, 0x2, 0x4, 0x3}, 0x48) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r1, 0x4)

09:02:15 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000000)=0xffffffff, 0x4)

[  995.457160][T20604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  995.469018][T20604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
09:02:15 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

[  995.474623][T20604] batman_adv: batadv0: Adding interface: batadv_slave_1
[  995.477640][T20604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
09:02:15 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
r2 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x6000001d})

[  995.494829][T20604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
09:02:15 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r3, 0xd}, 0x14}}, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x5411, &(0x7f0000000000))
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xe1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xdd00}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}]}, 0x54}}, 0xc0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:15 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)
setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000000)=0xffffffff, 0x4)

09:02:15 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)

09:02:15 executing program 1:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
r2 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x6000001d})

09:02:15 executing program 0:
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket(0x10, 0x6, 0x5)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)

[  995.568406][T20604] hsr_slave_0: entered promiscuous mode
[  995.574366][T20604] hsr_slave_1: entered promiscuous mode
09:02:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) (async)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r3, 0xd}, 0x14}}, 0x0) (async)
r4 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x5411, &(0x7f0000000000)) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xe1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xdd00}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}]}, 0x54}}, 0xc0) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:15 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080))
r2 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x6000001d})

09:02:15 executing program 0:
r0 = getpid()
r1 = gettid()
r2 = syz_clone(0x0, &(0x7f0000000f40), 0x0, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, 0x0)
r3 = epoll_create(0x400)
r4 = socket(0x11, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000))
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa1, 0xa1, 0x4, [@datasec={0xf, 0x1, 0x0, 0xf, 0x2, [{0x1, 0xff, 0x1f}], "f46b"}, @datasec={0xe, 0x3, 0x0, 0xf, 0x3, [{0x1, 0x40, 0x22}, {0x5, 0xb5, 0x4}, {0x5, 0x10001, 0x8}], "a57b75"}, @union={0xb, 0x6, 0x0, 0x5, 0x1, 0x2, [{0x8, 0x2, 0x400}, {0x1, 0x5, 0x7}, {0x9, 0x4, 0x4}, {0x3, 0x1, 0x6}, {0x5, 0x5}, {0xf, 0x0, 0x9f}]}]}, {0x0, [0x5f, 0x61]}}, &(0x7f00000000c0), 0xc0, 0x0, 0x0, 0x3}, 0x20)
kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={r3, r5, 0x7})
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r6, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:15 executing program 1:
socket$igmp6(0xa, 0x3, 0x2) (async)
r0 = socket(0x10, 0x6, 0x5)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)

09:02:15 executing program 2:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x40840)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x18, &(0x7f0000000300)={&(0x7f0000000140)=""/152, 0x98, <r3=>0x0, &(0x7f0000000200)=""/244, 0xf4}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r3, 0x4)

09:02:15 executing program 0:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080))
r2 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x6000001d})

09:02:15 executing program 2:
getpid() (async)
r0 = getpid()
r1 = gettid()
r2 = syz_clone(0x0, &(0x7f0000000f40), 0x0, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, 0x0)
epoll_create(0x400) (async)
r3 = epoll_create(0x400)
r4 = socket(0x11, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000))
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa1, 0xa1, 0x4, [@datasec={0xf, 0x1, 0x0, 0xf, 0x2, [{0x1, 0xff, 0x1f}], "f46b"}, @datasec={0xe, 0x3, 0x0, 0xf, 0x3, [{0x1, 0x40, 0x22}, {0x5, 0xb5, 0x4}, {0x5, 0x10001, 0x8}], "a57b75"}, @union={0xb, 0x6, 0x0, 0x5, 0x1, 0x2, [{0x8, 0x2, 0x400}, {0x1, 0x5, 0x7}, {0x9, 0x4, 0x4}, {0x3, 0x1, 0x6}, {0x5, 0x5}, {0xf, 0x0, 0x9f}]}]}, {0x0, [0x5f, 0x61]}}, &(0x7f00000000c0), 0xc0, 0x0, 0x0, 0x3}, 0x20)
kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={r3, r5, 0x7})
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r6, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)
getsockopt$bt_sco_SCO_OPTIONS(r6, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:15 executing program 1:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) (async)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x40840)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x18, &(0x7f0000000300)={&(0x7f0000000140)=""/152, 0x98, <r3=>0x0, &(0x7f0000000200)=""/244, 0xf4}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r3, 0x4)

09:02:15 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$MRT6(r0, 0x29, 0xcf, &(0x7f0000000000), &(0x7f0000000040)=0x4)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e24, 0x8, @remote, 0x7f}, {0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x44}, 0x400}, 0xffffffffffffffff, {[0xc9c, 0x4, 0x5d, 0x35a9284e, 0x8000000, 0x7, 0xa5b, 0x3]}}, 0x5c)

09:02:15 executing program 0:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080))
r2 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x6000001d})

09:02:15 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080))
r2 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x6000001d})

09:02:15 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$MRT6(r0, 0x29, 0xcf, &(0x7f0000000000), &(0x7f0000000040)=0x4)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)
setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e24, 0x8, @remote, 0x7f}, {0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x44}, 0x400}, 0xffffffffffffffff, {[0xc9c, 0x4, 0x5d, 0x35a9284e, 0x8000000, 0x7, 0xa5b, 0x3]}}, 0x5c)

[  995.887220][   T80] bridge_slave_1: left allmulticast mode
[  995.896879][   T80] bridge_slave_1: left promiscuous mode
[  995.898982][   T80] bridge0: port 2(bridge_slave_1) entered disabled state
09:02:15 executing program 0:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080))
r1 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x6000001d})

[  995.941536][   T80] bridge_slave_0: left allmulticast mode
[  995.943586][   T80] bridge_slave_0: left promiscuous mode
[  995.945669][   T80] bridge0: port 1(bridge_slave_0) entered disabled state
09:02:15 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080))
r2 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x6000001d})

09:02:15 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a0, &(0x7f0000000900)={'batadv_slave_1\x00'})
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r1, @ANYRES16=r1, @ANYBLOB="00012ba7fcfa3f99619c5b000000050004000400000008001100000000000500060098000008000c000100"/54], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x20008084)
socket$igmp6(0xa, 0x3, 0x2)
socketpair(0x1a, 0x800, 0x1f, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r3=>r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'})
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r4, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x9, 0xffffffff, 0x9, 0x1000}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004085}, 0x14)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000040), 0x4)
socketpair(0xa, 0x80000, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r5)

09:02:15 executing program 2:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080))
r1 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x6000001d})

09:02:15 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080))
r2 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x6000001d})

09:02:15 executing program 1:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080))
r1 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x6000001d})

09:02:15 executing program 2:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080))
r1 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x6000001d})

09:02:15 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000000)=0x5)

09:02:15 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:15 executing program 2:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000000)=0x5)

09:02:15 executing program 1:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

[  996.259699][ T5213] Bluetooth: hci2: command tx timeout
09:02:15 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0)
r2 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x6000001d})

09:02:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x9, @media='ib\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x2000c004)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x480d0)
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x0, 0x70bd2c, 0x7, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008002}, 0x90)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r1)
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c8d0}, 0x40044)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), r1)
r4 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8)
r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r6, 0x40305828, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r6, 0x11, 0x1, &(0x7f0000000d80)=""/199, &(0x7f0000000e80)=0xc7)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x9, [@enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x81}, {0xc, 0xff}]}, @struct={0xe, 0x8, 0x0, 0x4, 0x1, 0x50000, [{0x0, 0x3, 0x4}, {0x1, 0x5, 0x10001}, {0xc, 0x0, 0x8001}, {0x4, 0x1, 0x1}, {0x1, 0x5, 0x4}, {0x3, 0x0, 0x5}, {0x5, 0x2, 0x9}, {0x9, 0x2, 0xfffffffd}]}]}, {0x0, [0x30, 0xf2, 0x30, 0x30, 0x5f, 0x0, 0x2e]}}, &(0x7f00000002c0)=""/8, 0xa9, 0x8, 0x1, 0x80000001}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r6, 0x287, '\x00', r5, r7, 0x2, 0x4, 0x2}, 0x48)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x14044040}, 0x1)
r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000500)='ns/user\x00')
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000008}, 0x2000c004)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', <r9=>0x0, 0x29, 0x0, 0x0, 0x80000000, 0xd, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10, 0x8, 0x0, 0x9898}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r10=>0x0, 0x29, 0x20, 0x5, 0xe06d, 0x2, @remote, @dev={0xfe, 0x80, '\x00', 0x17}, 0x20, 0x40, 0xfffffff9, 0x1000}})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01012bbd7000fbdbdf250200000008000100", @ANYRES32=r9, @ANYBLOB="08020200010000000800080001000000080005000a01010108000100", @ANYRES32=r10, @ANYBLOB="0800080004000000"], 0x44}, 0x1, 0x0, 0x0, 0x24000005}, 0x2)
r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r11, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:16 executing program 2:
r0 = epoll_create1(0x0)
r1 = epoll_create(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x6})
epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x6, &(0x7f0000000080)={[0x9]}, 0x8)

09:02:16 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0)
r2 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x6000001d})

[  996.371622][T20856] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
[  996.397518][   T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
09:02:16 executing program 1:
r0 = epoll_create1(0x0) (async)
r1 = epoll_create(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x6}) (async)
epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x6, &(0x7f0000000080)={[0x9]}, 0x8)

09:02:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x9, @media='ib\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x2000c004) (async)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x480d0) (async, rerun: 64)
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x0, 0x70bd2c, 0x7, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008002}, 0x90) (rerun: 64)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r1)
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c8d0}, 0x40044) (async)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), r1) (async)
r4 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8) (async)
r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r6, 0x40305828, 0x0) (async)
getsockopt$bt_sco_SCO_OPTIONS(r6, 0x11, 0x1, &(0x7f0000000d80)=""/199, &(0x7f0000000e80)=0xc7)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x9, [@enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x81}, {0xc, 0xff}]}, @struct={0xe, 0x8, 0x0, 0x4, 0x1, 0x50000, [{0x0, 0x3, 0x4}, {0x1, 0x5, 0x10001}, {0xc, 0x0, 0x8001}, {0x4, 0x1, 0x1}, {0x1, 0x5, 0x4}, {0x3, 0x0, 0x5}, {0x5, 0x2, 0x9}, {0x9, 0x2, 0xfffffffd}]}]}, {0x0, [0x30, 0xf2, 0x30, 0x30, 0x5f, 0x0, 0x2e]}}, &(0x7f00000002c0)=""/8, 0xa9, 0x8, 0x1, 0x80000001}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r6, 0x287, '\x00', r5, r7, 0x2, 0x4, 0x2}, 0x48) (async, rerun: 64)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x14044040}, 0x1) (async, rerun: 64)
r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000500)='ns/user\x00')
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000008}, 0x2000c004)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', <r9=>0x0, 0x29, 0x0, 0x0, 0x80000000, 0xd, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10, 0x8, 0x0, 0x9898}}) (async, rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r10=>0x0, 0x29, 0x20, 0x5, 0xe06d, 0x2, @remote, @dev={0xfe, 0x80, '\x00', 0x17}, 0x20, 0x40, 0xfffffff9, 0x1000}}) (rerun: 32)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01012bbd7000fbdbdf250200000008000100", @ANYRES32=r9, @ANYBLOB="08020200010000000800080001000000080005000a01010108000100", @ANYRES32=r10, @ANYBLOB="0800080004000000"], 0x44}, 0x1, 0x0, 0x0, 0x24000005}, 0x2) (async)
r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r11, 0x11, 0x1, 0x0, &(0x7f0000000540))

[  996.412726][   T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  996.418044][   T80] bond0 (unregistering): Released all slaves
[  996.436173][T20862] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
09:02:16 executing program 0:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0)
r2 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x6000001d})

09:02:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a0, &(0x7f0000000900)={'batadv_slave_1\x00'})
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r1, @ANYRES16=r1, @ANYBLOB="00012ba7fcfa3f99619c5b000000050004000400000008001100000000000500060098000008000c000100"/54], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x20008084)
socket$igmp6(0xa, 0x3, 0x2)
socketpair(0x1a, 0x800, 0x1f, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r3=>r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'})
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r4, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x9, 0xffffffff, 0x9, 0x1000}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004085}, 0x14)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000040), 0x4)
socketpair(0xa, 0x80000, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r5)

09:02:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a0, &(0x7f0000000900)={'batadv_slave_1\x00'}) (async)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r1, @ANYRES16=r1, @ANYBLOB="00012ba7fcfa3f99619c5b000000050004000400000008001100000000000500060098000008000c000100"/54], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x20008084)
socket$igmp6(0xa, 0x3, 0x2) (async)
socketpair(0x1a, 0x800, 0x1f, &(0x7f0000000000)={<r2=>0xffffffffffffffff}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r3=>r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'})
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r4, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x9, 0xffffffff, 0x9, 0x1000}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004085}, 0x14)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000040), 0x4) (async)
socketpair(0xa, 0x80000, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r5)

09:02:16 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:16 executing program 1:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
r2 = epoll_create(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x6000001d})

09:02:16 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f0000000440)=0xe8)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000400), 0x4)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x5}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x200048c4}, 0x40005)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={0x0}}, 0x801)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x811}, 0x0)

09:02:16 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:16 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f0000000440)=0xe8)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000400), 0x4) (async)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r2) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x5}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x200048c4}, 0x40005)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={0x0}}, 0x801)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x811}, 0x0)

09:02:16 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x44080, 0x0)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0xb, r1})
setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e24, 0x9, @private1, 0xffffff00}, {0xa, 0x4e21, 0xffffffe0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7ff}, 0xffffffffffffffff, {[0x7fffffff, 0x6, 0x8, 0x9, 0x8, 0x4, 0xfffffffe, 0x10000]}}, 0x5c)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r1, 0x0, 0x2, 0xe0, &(0x7f0000000180)="2a006e48459658c62670abb6c1993cca59da0cbfe35c5381046fd4324fe7dba4336023e4ae3487368c69f07b30b7017160fe339eed11e3e48aec78d2db2e86af17bb5999e4b7909fefe964c40fe4c6a770262765798dc6d71f2f0fc53df584e64fdd4b371e061285f5d2608eb32dcd6957a25dd9d45d1b9d3c02c43ab7161dc106989cd9595f337852b1b5991264503fda1d6d3a1ab97e0b4f0d415f1447f8b6649794a1460063945175660180b80a03a29869b6716a8f92a63abe3376f8543871877974905d328d7b68a030a6a578402c981f826cd326cef007c23827657630", 0x1})

09:02:16 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
r2 = epoll_create(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x6000001d})

09:02:16 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)

09:02:16 executing program 1:
bpf$BPF_BTF_GET_FD_BY_ID(0xc, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:16 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_PIM(r0, 0x29, 0xcf, &(0x7f0000000000)=0x3, 0x4)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)

09:02:16 executing program 1:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
r2 = epoll_create(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x6000001d})

09:02:16 executing program 2:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x44080, 0x0) (async)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0xb, r1}) (async)
setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e24, 0x9, @private1, 0xffffff00}, {0xa, 0x4e21, 0xffffffe0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7ff}, 0xffffffffffffffff, {[0x7fffffff, 0x6, 0x8, 0x9, 0x8, 0x4, 0xfffffffe, 0x10000]}}, 0x5c) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r1, 0x0, 0x2, 0xe0, &(0x7f0000000180)="2a006e48459658c62670abb6c1993cca59da0cbfe35c5381046fd4324fe7dba4336023e4ae3487368c69f07b30b7017160fe339eed11e3e48aec78d2db2e86af17bb5999e4b7909fefe964c40fe4c6a770262765798dc6d71f2f0fc53df584e64fdd4b371e061285f5d2608eb32dcd6957a25dd9d45d1b9d3c02c43ab7161dc106989cd9595f337852b1b5991264503fda1d6d3a1ab97e0b4f0d415f1447f8b6649794a1460063945175660180b80a03a29869b6716a8f92a63abe3376f8543871877974905d328d7b68a030a6a578402c981f826cd326cef007c23827657630", 0x1})

09:02:16 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_PIM(r0, 0x29, 0xcf, &(0x7f0000000000)=0x3, 0x4) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)

09:02:16 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000240)={0x6000001d})

09:02:16 executing program 1:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xff, '\x00', 0x0, r0, 0x1, 0x5, 0x3}, 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x100, '\x00', 0x0, r0, 0x2, 0x1, 0x4}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x9, '\x00', 0x0, r0, 0x5, 0x3, 0x5}, 0x48)

09:02:16 executing program 2:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000125bd00000000800200000000000000000c4100000014002f62726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

09:02:16 executing program 1:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000240)={0x6000001d})

09:02:16 executing program 1:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xff, '\x00', 0x0, r0, 0x1, 0x5, 0x3}, 0x48) (async)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x100, '\x00', 0x0, r0, 0x2, 0x1, 0x4}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x9, '\x00', 0x0, r0, 0x5, 0x3, 0x5}, 0x48)

09:02:16 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000240)={0x6000001d})

09:02:16 executing program 1:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000125bd00000000800200000000000000000c4100000014002f62726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

09:02:16 executing program 2:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x8980, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000340)={0xc})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000000)=""/116, 0x74, 0x0, &(0x7f0000000080)=""/171, 0xab}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', <r2=>0x0, 0x4, 0x5, 0x0, 0x0, 0x21, @dev={0xfe, 0x80, '\x00', 0x2e}, @dev={0xfe, 0x80, '\x00', 0x12}, 0x8000, 0x7800, 0x2, 0x7e4}})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0xd98e, 0x0, 0xffffffffffffffff, 0x6, '\x00', r2, r0, 0x1, 0x1, 0x1}, 0x48)

09:02:16 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
r2 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x6000001d})

09:02:16 executing program 1:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) (async)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x8980, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000340)={0xc}) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000000)=""/116, 0x74, 0x0, &(0x7f0000000080)=""/171, 0xab}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', <r2=>0x0, 0x4, 0x5, 0x0, 0x0, 0x21, @dev={0xfe, 0x80, '\x00', 0x2e}, @dev={0xfe, 0x80, '\x00', 0x12}, 0x8000, 0x7800, 0x2, 0x7e4}})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0xd98e, 0x0, 0xffffffffffffffff, 0x6, '\x00', r2, r0, 0x1, 0x1, 0x1}, 0x48)

[  996.824578][   T80] hsr_slave_0: left promiscuous mode
[  996.828250][   T80] hsr_slave_1: left promiscuous mode
09:02:16 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4)
socketpair(0x1e, 0x4, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x3, 0x4}}, 0x10)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000040), 0x4)
setsockopt$MRT6_DONE(r2, 0x29, 0xc9, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)

[  996.833291][   T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  996.836291][   T80] batman_adv: batadv0: Removing interface: batadv_slave_0
09:02:16 executing program 2:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r0, 0x20, &(0x7f0000000080)={&(0x7f0000000000)=""/4, 0x4, <r1=>0x0, &(0x7f0000000040)=""/53, 0x35}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r1, 0x4)

[  996.841993][   T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  996.846350][   T80] batman_adv: batadv0: Removing interface: batadv_slave_1
[  996.852185][   T80] veth1_macvtap: left promiscuous mode
[  996.854311][   T80] veth0_macvtap: left promiscuous mode
[  996.856580][   T80] veth1_vlan: left promiscuous mode
09:02:16 executing program 1:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
r2 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x6000001d})

[  996.861640][   T80] veth0_vlan: left promiscuous mode
09:02:16 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async)
socketpair(0x1e, 0x4, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x3, 0x4}}, 0x10)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000040), 0x4) (async)
setsockopt$MRT6_DONE(r2, 0x29, 0xc9, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)

09:02:16 executing program 1:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r0, 0x20, &(0x7f0000000080)={&(0x7f0000000000)=""/4, 0x4, <r1=>0x0, &(0x7f0000000040)=""/53, 0x35}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r1, 0x4)

09:02:16 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
r2 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x6000001d})

09:02:16 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r3, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0xf3e, @media='ib\x00'}}}}, 0x68}}, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r3, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008041}, 0x20000010)

09:02:16 executing program 1:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
r2 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0)

09:02:16 executing program 1:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x40001)

[  996.996653][   T80] team0 (unregistering): Port device team_slave_1 removed
[  997.008869][   T80] team0 (unregistering): Port device team_slave_0 removed
09:02:16 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
r2 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0)

09:02:16 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r3, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0xf3e, @media='ib\x00'}}}}, 0x68}}, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r3, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008041}, 0x20000010)
socket$igmp6(0xa, 0x3, 0x2) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) (async)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r3, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0xf3e, @media='ib\x00'}}}}, 0x68}}, 0x0) (async)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r3, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008041}, 0x20000010) (async)

09:02:16 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x40001)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x40001) (async)

[  997.130893][T20604] netdevsim netdevsim3 netdevsim0: renamed from eth0
09:02:16 executing program 1:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
r2 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0)

[  997.137532][T20604] netdevsim netdevsim3 netdevsim1: renamed from eth1
09:02:16 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2)

[  997.150247][T20604] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  997.158103][T20604] netdevsim netdevsim3 netdevsim3: renamed from eth3
09:02:16 executing program 2:
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x7fffffff, <r0=>0x0}, 0x8)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001200)={r1, 0x20, &(0x7f00000011c0)={&(0x7f00000000c0)=""/4096, 0x1000, 0x0, &(0x7f00000010c0)=""/215, 0xd7}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4)

09:02:16 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), r1) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2)

[  997.228355][T20604] 8021q: adding VLAN 0 to HW filter on device bond0
[  997.244149][T20604] 8021q: adding VLAN 0 to HW filter on device team0
[  997.254651][ T1938] bridge0: port 1(bridge_slave_0) entered blocking state
[  997.257619][ T1938] bridge0: port 1(bridge_slave_0) entered forwarding state
[  997.266069][ T4937] bridge0: port 2(bridge_slave_1) entered blocking state
[  997.269472][ T4937] bridge0: port 2(bridge_slave_1) entered forwarding state
[  997.409813][T20604] 8021q: adding VLAN 0 to HW filter on device batadv0
[  997.444287][T20604] veth0_vlan: entered promiscuous mode
[  997.449461][ T5209] Bluetooth: hci3: command 0x041b tx timeout
[  997.450877][T20604] veth1_vlan: entered promiscuous mode
[  997.472780][T20604] veth0_macvtap: entered promiscuous mode
[  997.477238][T20604] veth1_macvtap: entered promiscuous mode
[  997.486977][T20604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  997.491766][T20604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  997.495355][T20604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  997.499115][T20604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
09:02:17 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$MRT6(r0, 0x29, 0x0, &(0x7f0000000100), &(0x7f0000000040)=0x4)
setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e21, 0x0, @loopback, 0x3}, {0xa, 0x4e22, 0x7fff, @mcast1, 0x3}, 0xffffffffffffffff, {[0x80000000, 0x400, 0xec, 0x4, 0x1, 0x4, 0x6, 0x2]}}, 0x5c)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)

09:02:17 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
r2 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240))

09:02:17 executing program 1:
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x7fffffff, <r0=>0x0}, 0x8)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001200)={r1, 0x20, &(0x7f00000011c0)={&(0x7f00000000c0)=""/4096, 0x1000, 0x0, &(0x7f00000010c0)=""/215, 0xd7}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4)

[  997.504113][T20604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  997.508301][T20604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  997.514109][T20604] batman_adv: batadv0: Interface activated: batadv_slave_0
09:02:17 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)

[  997.524329][T20604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  997.528161][T20604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  997.535218][T20604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  997.539047][T20604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  997.544417][T20604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  997.548181][T20604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
09:02:17 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$MRT6(r0, 0x29, 0x0, &(0x7f0000000100), &(0x7f0000000040)=0x4)
setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e21, 0x0, @loopback, 0x3}, {0xa, 0x4e22, 0x7fff, @mcast1, 0x3}, 0xffffffffffffffff, {[0x80000000, 0x400, 0xec, 0x4, 0x1, 0x4, 0x6, 0x2]}}, 0x5c)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
socket$igmp6(0xa, 0x3, 0x2) (async)
getsockopt$MRT6(r0, 0x29, 0x0, &(0x7f0000000100), &(0x7f0000000040)=0x4) (async)
setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e21, 0x0, @loopback, 0x3}, {0xa, 0x4e22, 0x7fff, @mcast1, 0x3}, 0xffffffffffffffff, {[0x80000000, 0x400, 0xec, 0x4, 0x1, 0x4, 0x6, 0x2]}}, 0x5c) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)

[  997.553973][T20604] batman_adv: batadv0: Interface activated: batadv_slave_1
[  997.561853][T20604] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
09:02:17 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)

[  997.565319][T20604] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  997.568719][T20604] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  997.572817][T20604] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
09:02:17 executing program 2:
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x7fffffff, <r0=>0x0}, 0x8)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001200)={r1, 0x20, &(0x7f00000011c0)={&(0x7f00000000c0)=""/4096, 0x1000, 0x0, &(0x7f00000010c0)=""/215, 0xd7}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x7fffffff}, 0x8) (async)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001200)={r1, 0x20, &(0x7f00000011c0)={&(0x7f00000000c0)=""/4096, 0x1000, 0x0, &(0x7f00000010c0)=""/215, 0xd7}}, 0x10) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4) (async)

09:02:17 executing program 1:
clock_gettime(0x3, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000080)={0x200, 0x4, 0x0, 0x1ff, 0x5, 0xb, 0x659b}, &(0x7f00000002c0)={0xffff, 0x1, 0xf2d, 0x9, 0x3, 0x7fffffff, 0xb4f, 0xffffffff}, &(0x7f0000000100)={0x6, 0xe9, 0x22d6384b, 0x4, 0x7, 0x2, 0x0, 0x6}, &(0x7f0000000180)={r0, r1+10000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x6]}, 0x8})
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080))
epoll_pwait(r3, &(0x7f0000000300)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000340)={[0x400]}, 0x8)
epoll_pwait(r3, &(0x7f0000000240)=[{}], 0x1, 0xfd9f, &(0x7f0000000280)={[0x2]}, 0x8)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, 0x0, &(0x7f0000000540))
r5 = socket(0x9, 0x2, 0x1)
connect$bt_sco(r5, &(0x7f0000000000), 0x8)
rt_sigsuspend(&(0x7f00000000c0)={[0xffff]}, 0x8)

[  997.646288][ T4921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  997.650407][ T4921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:02:17 executing program 2:
socket$igmp6(0xa, 0x3, 0x2)
socketpair(0x1e, 0x4, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
connect$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4}}, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0)

09:02:17 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000040), 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8, <r1=>0x0}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'})
syz_io_uring_setup(0x5cc2, &(0x7f00000000c0)={0x0, 0xc895, 0x2bcb7a1d94f680fc, 0x2, 0x376, 0x0, r2}, &(0x7f0000000140), &(0x7f0000000180))
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r1, 0xfc9b)
openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)

[  997.677176][ T9038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  997.681604][ T9038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:02:17 executing program 3:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)

09:02:17 executing program 2:
socket$igmp6(0xa, 0x3, 0x2) (async)
socketpair(0x1e, 0x4, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
connect$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4}}, 0x10) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0)

09:02:17 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000040), 0x4) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8, <r1=>0x0}, 0x8) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'})
syz_io_uring_setup(0x5cc2, &(0x7f00000000c0)={0x0, 0xc895, 0x2bcb7a1d94f680fc, 0x2, 0x376, 0x0, r2}, &(0x7f0000000140), &(0x7f0000000180)) (async, rerun: 64)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r1, 0xfc9b) (async, rerun: 64)
openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)

09:02:17 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1}, 0x14}}, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x3, @media='udp\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x20004800)
socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3)

09:02:17 executing program 2:
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xfa, <r0=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0xffffffffffffff90)

09:02:17 executing program 2:
r0 = socket(0x10, 0x3, 0x0) (async)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1}, 0x14}}, 0x0) (async, rerun: 32)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x3, @media='udp\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x20004800) (async)
socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3)

09:02:17 executing program 2:
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xfa, <r0=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0xffffffffffffff90)

09:02:17 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket(0x2c, 0x80000, 0x80)
socket$inet6(0xa, 0x800, 0x77d)
setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000040), 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000000400)=""/4096, &(0x7f00000000c0)=0x1000)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)

09:02:17 executing program 2:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', <r1=>0x0, 0x29, 0x1, 0x0, 0x4, 0xe, @initdev={0xfe, 0x88, '\x00', 0x80, 0x0}, @private1, 0x700, 0xb3720b0c9ef9ffcb, 0x0, 0x7}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x55, '\x00', r1, r0, 0x0, 0x2, 0x3}, 0x48)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'sit0\x00', r1, 0x1, 0x20, 0x18, 0x8, {{0x10, 0x4, 0x2, 0xf, 0x40, 0x67, 0x0, 0x5, 0x6, 0x0, @multicast2, @multicast1, {[@rr={0x7, 0x27, 0xf5, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @empty, @multicast2, @local, @multicast2, @loopback, @rand_addr=0x64010100]}, @end, @timestamp={0x44, 0x4, 0xc9, 0x0, 0xd}]}}}}})

09:02:17 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket(0x2c, 0x80000, 0x80)
socket$inet6(0xa, 0x800, 0x77d)
setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000040), 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000000400)=""/4096, &(0x7f00000000c0)=0x1000)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
socket$igmp6(0xa, 0x3, 0x2) (async)
socket(0x2c, 0x80000, 0x80) (async)
socket$inet6(0xa, 0x800, 0x77d) (async)
setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000040), 0x4) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000000400)=""/4096, &(0x7f00000000c0)=0x1000) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) (async)

09:02:17 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) (async)
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', <r1=>0x0, 0x29, 0x1, 0x0, 0x4, 0xe, @initdev={0xfe, 0x88, '\x00', 0x80, 0x0}, @private1, 0x700, 0xb3720b0c9ef9ffcb, 0x0, 0x7}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x55, '\x00', r1, r0, 0x0, 0x2, 0x3}, 0x48)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'sit0\x00', r1, 0x1, 0x20, 0x18, 0x8, {{0x10, 0x4, 0x2, 0xf, 0x40, 0x67, 0x0, 0x5, 0x6, 0x0, @multicast2, @multicast1, {[@rr={0x7, 0x27, 0xf5, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @empty, @multicast2, @local, @multicast2, @loopback, @rand_addr=0x64010100]}, @end, @timestamp={0x44, 0x4, 0xc9, 0x0, 0xd}]}}}}})

09:02:17 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)

09:02:17 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x1f)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0))
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r3)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
epoll_create(0x9)

09:02:17 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0xd, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:17 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x1f)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0))
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r3)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
epoll_create(0x9)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
epoll_create(0x1f) (async)
epoll_create1(0x80000) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) (async)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)) (async)
epoll_create1(0x0) (async)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r3) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) (async)
epoll_create(0x9) (async)

09:02:17 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0xd, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:17 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000), 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:17 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0xd, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:17 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000), 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
bind$bt_sco(r0, &(0x7f0000000000), 0x8) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) (async)

09:02:17 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0xd, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:17 executing program 2:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000040)=""/158, 0x9e, <r0=>0x0, &(0x7f0000000100)=""/85, 0x55}}, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x10001, 0x1, r1, 0x419f, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x0)

09:02:17 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0xd, 0x0, 0x0)

09:02:17 executing program 2:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000040)=""/158, 0x9e, <r0=>0x0, &(0x7f0000000100)=""/85, 0x55}}, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x10001, 0x1, r1, 0x419f, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x0)

09:02:17 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0xd, 0x0, 0x0)

09:02:17 executing program 2:
r0 = socket(0x22, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

[  998.329331][ T5209] Bluetooth: hci2: command tx timeout
09:02:18 executing program 0:
r0 = socket(0x22, 0x2, 0x1)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:18 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0xd, 0x0, 0x0)

09:02:18 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0xe, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:18 executing program 0:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)
accept4$tipc(r0, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x0)

09:02:18 executing program 1:
r0 = socket(0x38, 0x3, 0x0)
connect$bt_sco(r0, &(0x7f0000000140)={0x1f, @none}, 0x8)
setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x5, 0x4)
r1 = socket(0x10, 0x3, 0x0)
connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @none}, 0x8)
write$bt_hci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="a472971c60075169ffff778086250cd4bf0ca6ca63038d8974fc53e50b702c19bafe72eda16b63d56b50698bc5f5bac8fc53a7f3074b95380405f408c6da0cd7c4472843280e8b7317e39ae023b9fba9fe10779e8114af31a78137950ada0b1ed5db935e44fa5ac29ef15c774be5422e4687930cb875d82eb2aaa95d83632881de9d4c97e50d1240aa70d3daaf8581ab2d786daba16d8a4bddcd0f88c5d7a84375a4ab105bf463102585d97f1eb511e2d2d6cbe4fc"], 0xa)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0)
connect$bt_sco(r1, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
syz_io_uring_setup(0x1ca9, &(0x7f00000001c0)={0x0, 0x409, 0x2030, 0x0, 0x3}, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000280))
syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})

09:02:18 executing program 2:
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x5d, <r0=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r0, 0x4)

09:02:18 executing program 0:
bpf$BPF_BTF_GET_FD_BY_ID(0xf, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:18 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x10, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:18 executing program 1:
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x5d, <r0=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r0, 0x4) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r0, 0x4)

09:02:18 executing program 2:
clock_gettime(0x3, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000080)={0x200, 0x4, 0x0, 0x1ff, 0x5, 0xb, 0x659b}, &(0x7f00000002c0)={0xffff, 0x1, 0xf2d, 0x9, 0x3, 0x7fffffff, 0xb4f, 0xffffffff}, &(0x7f0000000100)={0x6, 0xe9, 0x22d6384b, 0x4, 0x7, 0x2, 0x0, 0x6}, &(0x7f0000000180)={r0, r1+10000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x6]}, 0x8}) (async)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async)
epoll_pwait(r3, &(0x7f0000000300)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000340)={[0x400]}, 0x8) (async)
epoll_pwait(r3, &(0x7f0000000240)=[{}], 0x1, 0xfd9f, &(0x7f0000000280)={[0x2]}, 0x8) (async)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)
r5 = socket(0x9, 0x2, 0x1)
connect$bt_sco(r5, &(0x7f0000000000), 0x8)
rt_sigsuspend(&(0x7f00000000c0)={[0xffff]}, 0x8)

09:02:18 executing program 0:
clock_gettime(0x3, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000080)={0x200, 0x4, 0x0, 0x1ff, 0x5, 0xb, 0x659b}, &(0x7f00000002c0)={0xffff, 0x1, 0xf2d, 0x9, 0x3, 0x7fffffff, 0xb4f, 0xffffffff}, &(0x7f0000000100)={0x6, 0xe9, 0x22d6384b, 0x4, 0x7, 0x2, 0x0, 0x6}, &(0x7f0000000180)={r0, r1+10000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x6]}, 0x8})
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080))
epoll_pwait(r3, &(0x7f0000000300)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000340)={[0x400]}, 0x8)
epoll_pwait(r3, &(0x7f0000000240)=[{}], 0x1, 0xfd9f, &(0x7f0000000280)={[0x2]}, 0x8)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, 0x0, &(0x7f0000000540))
r5 = socket(0x9, 0x2, 0x1)
connect$bt_sco(r5, &(0x7f0000000000), 0x8)
rt_sigsuspend(&(0x7f00000000c0)={[0xffff]}, 0x8)

09:02:18 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)

09:02:18 executing program 3:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000040)=""/137, 0x89, <r0=>0x0, &(0x7f0000000100)=""/87, 0x57}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4)

09:02:18 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x11, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:18 executing program 3:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000040)=""/137, 0x89, <r0=>0x0, &(0x7f0000000100)=""/87, 0x57}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4)

09:02:18 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x12, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:18 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)

09:02:18 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x14, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:18 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)

09:02:18 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x15, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:18 executing program 3:
r0 = socket(0x38, 0x3, 0x0)
connect$bt_sco(r0, &(0x7f0000000140)={0x1f, @none}, 0x8) (async)
setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x5, 0x4) (async)
r1 = socket(0x10, 0x3, 0x0) (async)
connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @none}, 0x8) (async)
write$bt_hci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="a472971c60075169ffff778086250cd4bf0ca6ca63038d8974fc53e50b702c19bafe72eda16b63d56b50698bc5f5bac8fc53a7f3074b95380405f408c6da0cd7c4472843280e8b7317e39ae023b9fba9fe10779e8114af31a78137950ada0b1ed5db935e44fa5ac29ef15c774be5422e4687930cb875d82eb2aaa95d83632881de9d4c97e50d1240aa70d3daaf8581ab2d786daba16d8a4bddcd0f88c5d7a84375a4ab105bf463102585d97f1eb511e2d2d6cbe4fc"], 0xa)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0)
connect$bt_sco(r1, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
syz_io_uring_setup(0x1ca9, &(0x7f00000001c0)={0x0, 0x409, 0x2030, 0x0, 0x3}, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000280))
syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})

09:02:18 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, 0x0, 0x0)
connect$tipc(r2, &(0x7f0000000200)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x2}}, 0x10)
ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f00000005c0)={0x4})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', r1, 0x4, 0x2, 0x2, 0x9, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x20, 0x5, 0x2}})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6gre0\x00', r1, 0x2f, 0x9, 0x27, 0x40000002, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x68, 0x2e7402f852282335, 0x2001, 0x6}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x4}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x4, 0x80000000, @udp='udp:syz2\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r4, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x400}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040881}, 0x890)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r6 = socket$igmp6(0xa, 0x3, 0x2)
sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r4, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x80000001, @link='syz0\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8a0}, 0x40000080)
setsockopt$MRT6_DONE(r6, 0x29, 0xc9, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r5)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, r7, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x58}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xc25}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x24004000)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r4, 0x4, 0x70bd25, 0x25dfdbff, {{}, {}, {0x18, 0x18, {0x7, @bearer=@l2={'ib', 0x3a, 'syzkaller0\x00'}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000000)

09:02:18 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x16, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:18 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0}) (async)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, 0x0, 0x0) (async)
connect$tipc(r2, &(0x7f0000000200)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x2}}, 0x10) (async)
ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f00000005c0)={0x4})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', r1, 0x4, 0x2, 0x2, 0x9, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x20, 0x5, 0x2}})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) (async)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6gre0\x00', r1, 0x2f, 0x9, 0x27, 0x40000002, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x68, 0x2e7402f852282335, 0x2001, 0x6}}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x4}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x4, 0x80000000, @udp='udp:syz2\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r4, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x400}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040881}, 0x890) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
r6 = socket$igmp6(0xa, 0x3, 0x2)
sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r4, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x80000001, @link='syz0\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8a0}, 0x40000080) (async)
setsockopt$MRT6_DONE(r6, 0x29, 0xc9, 0x0, 0x0) (async)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r5)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, r7, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x58}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xc25}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x24004000) (async)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r4, 0x4, 0x70bd25, 0x25dfdbff, {{}, {}, {0x18, 0x18, {0x7, @bearer=@l2={'ib', 0x3a, 'syzkaller0\x00'}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000000)

09:02:18 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x17, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:18 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'})
epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x100, &(0x7f0000000080)={[0xa5]}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:18 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x18, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:18 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'})
epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x100, &(0x7f0000000080)={[0xa5]}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:18 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x19, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:18 executing program 3:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r0, 0x20, &(0x7f0000000180)={&(0x7f0000000000)=""/246, 0xf6, <r1=>0x0, &(0x7f0000000100)=""/66, 0x42}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r1, 0x4)

09:02:18 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x1a, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:18 executing program 3:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r0, 0x20, &(0x7f0000000180)={&(0x7f0000000000)=""/246, 0xf6, <r1=>0x0, &(0x7f0000000100)=""/66, 0x42}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r1, 0x4)

09:02:18 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x1b, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:18 executing program 3:
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x20, <r0=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4)

09:02:18 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x1c, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:18 executing program 3:
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x20}, 0x8) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x20, <r0=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4)

09:02:18 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x1d, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:18 executing program 3:
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0xfffffc00, <r0=>0x0}, 0x8)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r0, 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)='%-010d \x00'}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r3=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0xfffffc00, '\x00', r3, r1, 0x1, 0x1, 0x3}, 0x48)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0xfffffd98)

09:02:18 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x1d, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:19 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0x1d, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:19 executing program 0:
bpf$BPF_BTF_GET_FD_BY_ID(0x1e, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:19 executing program 3:
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0xfffffc00, <r0=>0x0}, 0x8)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r0, 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)='%-010d \x00'}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r3=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0xfffffc00, '\x00', r3, r1, 0x1, 0x1, 0x3}, 0x48)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0xfffffd98)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0xfffffc00}, 0x8) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r0, 0x4) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0x1}, &(0x7f0000000000), &(0x7f0000000100)='%-010d \x00'}, 0x20) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0xfffffc00, '\x00', r3, r1, 0x1, 0x1, 0x3}, 0x48) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0xfffffd98) (async)

09:02:19 executing program 1:
clock_gettime(0x3, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000080)={0x200, 0x4, 0x0, 0x1ff, 0x5, 0xb, 0x659b}, &(0x7f00000002c0)={0xffff, 0x1, 0xf2d, 0x9, 0x3, 0x7fffffff, 0xb4f, 0xffffffff}, &(0x7f0000000100)={0x6, 0xe9, 0x22d6384b, 0x4, 0x7, 0x2, 0x0, 0x6}, &(0x7f0000000180)={r0, r1+10000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x6]}, 0x8})
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080))
epoll_pwait(r3, &(0x7f0000000300)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000340)={[0x400]}, 0x8)
epoll_pwait(r3, &(0x7f0000000240)=[{}], 0x1, 0xfd9f, &(0x7f0000000280)={[0x2]}, 0x8)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, 0x0, &(0x7f0000000540))
r5 = socket(0x9, 0x2, 0x1)
connect$bt_sco(r5, &(0x7f0000000000), 0x8)
rt_sigsuspend(&(0x7f00000000c0)={[0xffff]}, 0x8)

09:02:19 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
connect$bt_sco(r0, &(0x7f0000000000), 0x8)

09:02:19 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0x1e, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:19 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x1d, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:19 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r1 = getpid()
r2 = getuid()
ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000040)={0x0, 0x0, {r1}, {r2}, 0x56d1, 0x1f})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:19 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x1e, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:19 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0x1d, 0x0, 0x0)

09:02:19 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r1 = getpid()
r2 = getuid()
ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000040)={0x0, 0x0, {r1}, {r2}, 0x56d1, 0x1f})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:19 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0x1e, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

[  999.539266][ T5209] Bluetooth: hci3: command 0x041b tx timeout
09:02:19 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x1d, 0x0, 0x0)

09:02:19 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @dev}}}})
connect$bt_sco(r0, &(0x7f0000000000), 0x8)

09:02:19 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x1e, 0x0, 0x0)

09:02:19 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0x1d, 0x0, 0x0)

09:02:19 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @dev}}}})
connect$bt_sco(r0, &(0x7f0000000000), 0x8)

09:02:19 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0x1e, 0x0, 0x0)

09:02:19 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @dev}}}})
connect$bt_sco(r0, &(0x7f0000000000), 0x8)

09:02:19 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x1e, 0x0, 0x0)

09:02:19 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @dev}}}})
connect$bt_sco(r0, &(0x7f0000000000), 0x8)

09:02:19 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

09:02:19 executing program 2:
r0 = socket(0x2, 0xa, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0)
ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:19 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @dev}}}})
connect$bt_sco(r0, &(0x7f0000000000), 0x8)

09:02:19 executing program 2:
r0 = socket(0x2, 0xa, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0)
ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:19 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
connect$bt_sco(r0, &(0x7f0000000000), 0x8)

09:02:19 executing program 2:
r0 = socket(0x2, 0xa, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0)
ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:19 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
connect$bt_sco(r0, &(0x7f0000000000), 0x8)

09:02:19 executing program 2:
r0 = socket(0x2, 0xa, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0)
ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:19 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000), 0x8)

09:02:19 executing program 2:
r0 = socket(0x2, 0xa, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0)
ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

09:02:19 executing program 2:
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8)

09:02:19 executing program 2:
r0 = socket(0x2, 0xa, 0x0)
ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

09:02:19 executing program 2:
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8)

09:02:19 executing program 2:
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

09:02:19 executing program 1:
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

09:02:19 executing program 0:
clock_gettime(0x3, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000080)={0x200, 0x4, 0x0, 0x1ff, 0x5, 0xb, 0x659b}, &(0x7f00000002c0)={0xffff, 0x1, 0xf2d, 0x9, 0x3, 0x7fffffff, 0xb4f, 0xffffffff}, &(0x7f0000000100)={0x6, 0xe9, 0x22d6384b, 0x4, 0x7, 0x2, 0x0, 0x6}, &(0x7f0000000180)={r0, r1+10000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x6]}, 0x8})
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080))
epoll_pwait(r3, &(0x7f0000000300)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000340)={[0x400]}, 0x8)
epoll_pwait(r3, &(0x7f0000000240)=[{}], 0x1, 0xfd9f, &(0x7f0000000280)={[0x2]}, 0x8)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, 0x0, &(0x7f0000000540))
r5 = socket(0x9, 0x2, 0x1)
connect$bt_sco(r5, &(0x7f0000000000), 0x8)
rt_sigsuspend(&(0x7f00000000c0)={[0xffff]}, 0x8)

09:02:19 executing program 2:
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8)

09:02:20 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
connect$bt_sco(r0, &(0x7f0000000000), 0x8)

09:02:20 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8)

09:02:20 executing program 1:
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

09:02:20 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8)

09:02:20 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

[ 1000.419276][ T5209] Bluetooth: hci2: command 0x040f tx timeout
09:02:20 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8)

09:02:20 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

09:02:20 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, 0x0, 0x0)

09:02:20 executing program 3:
r0 = socket(0x0, 0xa, 0x0)
ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

09:02:20 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

09:02:20 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, 0x0, 0x0)

09:02:20 executing program 3:
r0 = socket(0x2, 0x0, 0x0)
ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

09:02:20 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, 0x0, 0x0)

09:02:20 executing program 3:
r0 = socket(0x2, 0x0, 0x0)
ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

09:02:20 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
connect$bt_sco(r0, &(0x7f0000000000), 0x8)

09:02:20 executing program 3:
r0 = socket(0x2, 0x0, 0x0)
ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

09:02:20 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x101}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r2, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6c}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}]}, 0x5c}}, 0x40)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, 0x0, &(0x7f0000000540))
socketpair(0x1f, 0x3, 0x8, &(0x7f0000000000))

09:02:20 executing program 3:
socket(0x2, 0xa, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

09:02:20 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x101}, 0x14}}, 0x0) (async, rerun: 32)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r2, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6c}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}]}, 0x5c}}, 0x40) (async, rerun: 32)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)
socketpair(0x1f, 0x3, 0x8, &(0x7f0000000000))

09:02:20 executing program 3:
socket(0x2, 0xa, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

09:02:20 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x6, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x8000)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x80a4}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x68, r2, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xffff8001, @link='syz1\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20044004)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000540))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000003c0)={'batadv0\x00', <r3=>0x0})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r1, 0x22, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x40)

09:02:20 executing program 3:
socket(0x2, 0xa, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

09:02:20 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x6, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x8000)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x80a4}, 0x800) (async)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x80a4}, 0x800)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x68, r2, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xffff8001, @link='syz1\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20044004)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000540))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000003c0)={'batadv0\x00', <r3=>0x0})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r1, 0x22, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x40) (async)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r1, 0x22, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x40)

09:02:20 executing program 3:
r0 = socket(0x2, 0xa, 0x0)
ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

09:02:20 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:20 executing program 3:
r0 = socket(0x2, 0xa, 0x0)
ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

09:02:20 executing program 3:
r0 = socket(0x2, 0xa, 0x0)
ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

09:02:20 executing program 3:
r0 = socket(0x2, 0xa, 0x0)
ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

09:02:20 executing program 3:
r0 = socket(0x2, 0xa, 0x0)
ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

09:02:20 executing program 3:
r0 = socket(0x2, 0xa, 0x0)
ioctl$sock_bt_hci(r0, 0x400448dd, 0x0)

09:02:20 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)

09:02:20 executing program 3:
r0 = socket(0x2, 0xa, 0x0)
ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

09:02:20 executing program 2:
ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

09:02:20 executing program 3:
clock_gettime(0x3, &(0x7f0000000040))

09:02:20 executing program 0:
socket(0x2, 0xa, 0x0) (async)
r0 = socket(0x2, 0xa, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0)
ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:20 executing program 2:
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x2, 0x1}, 0x10)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000040), 0x8)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:20 executing program 3:
ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

09:02:20 executing program 0:
clock_gettime(0x0, &(0x7f0000000040))

09:02:20 executing program 0:
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x9, <r0=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x7}, 0x8)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0x20, &(0x7f00000010c0)={&(0x7f0000001180)=""/4096, 0x1000, 0x0, &(0x7f0000001080)=""/7, 0x7}}, 0x10)

09:02:20 executing program 3:
clock_gettime(0x0, &(0x7f0000000040))

09:02:20 executing program 0:
ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

09:02:21 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

09:02:21 executing program 3:
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x9, <r0=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x7}, 0x8) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x7}, 0x8)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0x20, &(0x7f00000010c0)={&(0x7f0000001180)=""/4096, 0x1000, 0x0, &(0x7f0000001080)=""/7, 0x7}}, 0x10)

09:02:21 executing program 0:
clock_gettime(0x0, &(0x7f0000000040))

09:02:21 executing program 0:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)

09:02:21 executing program 3:
clock_gettime(0x3, 0x0)

09:02:21 executing program 0:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0xfffffe38)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl2\x00', <r1=>0x0, 0x2f, 0x2, 0x5, 0x5ada, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7, 0x40, 0x3e9, 0x5}})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', r1, r0, 0x4, 0x2, 0x5}, 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xffffffe1, 0x0, 0x1, 0x5, '\x00', 0x0, r0, 0x2, 0x0, 0x2}, 0x48)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="5214ea70d9c489b9db55c086d46e9bd2bf418b246074ba94bdeabb5658bfda8ddf912c8c91845b56f9e8f300d8e3397aab01e769b9436ec7317ab39d8fe25227ecb12b53acf074958f0b1d3dfa27f2935c0206ecd79ad3da6e31ec7feab9ea205c97174b76caf9479cbac04aa57570603253940b697b5e7f8e1373eccd71e1f8c06d3e06c84ac6c7d6ce9d7c11b4d908479201182fd51b43ce7aef8ab117b1320227", @ANYRES32=<r3=>0x0, @ANYBLOB="7800004000000001000000094a1b002800640000072f907800000000640101028609b166c02f22e4d9070b8dffffffffe0000001"]})
r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000680), r4)
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000005c0)={0xc, <r5=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000600)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000040)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0xfffffffc, '\x00', r3, r0, 0x0, 0x3, 0x5}, 0x48)

09:02:21 executing program 3:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)

09:02:21 executing program 1:
clock_gettime(0x3, 0x0)

09:02:21 executing program 0:
r0 = socket(0x0, 0xa, 0x0)
ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

09:02:21 executing program 1:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0xfffffe38)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl2\x00', <r1=>0x0, 0x2f, 0x2, 0x5, 0x5ada, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7, 0x40, 0x3e9, 0x5}})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', r1, r0, 0x4, 0x2, 0x5}, 0x48) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', r1, r0, 0x4, 0x2, 0x5}, 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xffffffe1, 0x0, 0x1, 0x5, '\x00', 0x0, r0, 0x2, 0x0, 0x2}, 0x48)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="5214ea70d9c489b9db55c086d46e9bd2bf418b246074ba94bdeabb5658bfda8ddf912c8c91845b56f9e8f300d8e3397aab01e769b9436ec7317ab39d8fe25227ecb12b53acf074958f0b1d3dfa27f2935c0206ecd79ad3da6e31ec7feab9ea205c97174b76caf9479cbac04aa57570603253940b697b5e7f8e1373eccd71e1f8c06d3e06c84ac6c7d6ce9d7c11b4d908479201182fd51b43ce7aef8ab117b1320227", @ANYRES32=<r3=>0x0, @ANYBLOB="7800004000000001000000094a1b002800640000072f907800000000640101028609b166c02f22e4d9070b8dffffffffe0000001"]})
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000680), r4)
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000005c0)={0xc, <r5=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000600)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000040)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000040)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0xfffffffc, '\x00', r3, r0, 0x0, 0x3, 0x5}, 0x48)

09:02:21 executing program 3:
clock_gettime(0x3, 0x0)

09:02:21 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:21 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)

09:02:21 executing program 0:
bpf$BPF_BTF_GET_FD_BY_ID(0x21, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:21 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

09:02:21 executing program 0:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)

09:02:21 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x22, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:21 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)

09:02:21 executing program 0:
bpf$BPF_BTF_GET_FD_BY_ID(0x23, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair(0x18, 0x80000, 0x100, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000040)=""/177, &(0x7f0000000100)=0xb1)

09:02:21 executing program 3:
r0 = socket(0x2, 0x0, 0x0)
ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

09:02:21 executing program 0:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r0, 0x1, 0x2, 0x1}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x1ff, '\x00', 0x0, r0, 0x0, 0x3, 0x5}, 0x48)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0), 0x111202, 0x0)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r0)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000640)={0x8})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'syztnl1\x00', <r4=>0x0, 0x2f, 0x0, 0x0, 0x0, 0x20, @rand_addr=' \x01\x00', @empty, 0x8707, 0x10, 0x7fff, 0xd21}})
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x24, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_io_uring_setup(0x7636, &(0x7f0000000280)={0x0, 0x44e8, 0x208, 0x2, 0x33a}, &(0x7f0000000300), &(0x7f0000000340)=<r8=>0x0)
syz_io_uring_submit(0x0, r8, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x75, 0x0, @fd_index=0x1, 0xfffffffffffffffa, 0x6, 0x7, 0x4, 0x1, {0x2}})
sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r6, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xc0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

09:02:21 executing program 1:
bpf$BPF_BTF_GET_FD_BY_ID(0x24, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:21 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair(0x18, 0x80000, 0x100, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000040)=""/177, &(0x7f0000000100)=0xb1)

09:02:21 executing program 0:
socketpair(0x2b, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_TID={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8008}, 0x8080)

09:02:21 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x24, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

[ 1001.609390][ T5209] Bluetooth: hci3: command 0x041b tx timeout
09:02:21 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0x24, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:21 executing program 0:
r0 = socket(0x2, 0x0, 0x0)
ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

09:02:21 executing program 1:
socketpair(0x2b, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_TID={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8008}, 0x8080)

09:02:21 executing program 3:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
read$msr(r0, &(0x7f0000000000)=""/81, 0x51)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000ed13bfc1da07e5524d28b3e80c03f7cb99fd1ba793b71dcb6a9a6f8a", @ANYRES16=r1, @ANYBLOB="08002abd7000ffdbdf25010000000000000009410000004c0018000007ff696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x2004c0c0}, 0x40240d4)

09:02:21 executing program 2:
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x2, 0x1}, 0x10) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000040), 0x8) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:21 executing program 1:
bpf$BPF_BTF_GET_FD_BY_ID(0x24, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:21 executing program 3:
socketpair(0x2b, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_TID={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8008}, 0x8080)

09:02:21 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
read$msr(r0, &(0x7f0000000000)=""/81, 0x51)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000ed13bfc1da07e5524d28b3e80c03f7cb99fd1ba793b71dcb6a9a6f8a", @ANYRES16=r1, @ANYBLOB="08002abd7000ffdbdf25010000000000000009410000004c0018000007ff696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x2004c0c0}, 0x40240d4) (async)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000ed13bfc1da07e5524d28b3e80c03f7cb99fd1ba793b71dcb6a9a6f8a", @ANYRES16=r1, @ANYBLOB="08002abd7000ffdbdf25010000000000000009410000004c0018000007ff696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x2004c0c0}, 0x40240d4)

09:02:21 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x24, 0x0, 0x0)

09:02:21 executing program 0:
socketpair(0x2b, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_TID={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8008}, 0x8080)

09:02:21 executing program 1:
r0 = socket(0x2, 0x0, 0x0)
ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

09:02:21 executing program 3:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x214, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:21 executing program 0:
bpf$BPF_BTF_GET_FD_BY_ID(0x24, 0x0, 0x0)

09:02:21 executing program 3:
socketpair(0x2b, 0x1, 0x0, &(0x7f0000000000))

09:02:21 executing program 0:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) (async)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x214, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:21 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x24, 0x0, 0x0)

09:02:21 executing program 1:
socketpair(0x0, 0x1, 0x0, &(0x7f0000000000))

09:02:21 executing program 0:
socket(0x2, 0xa, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

09:02:21 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000380)=0x2, 0x4)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080)=0x4)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', r1, 0x2f, 0x8d, 0x6, 0x2, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @local}, 0x20, 0x7, 0xfff, 0x8}})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)

09:02:21 executing program 0:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r0, 0x1, 0x2, 0x1}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x1ff, '\x00', 0x0, r0, 0x0, 0x3, 0x5}, 0x48)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0), 0x111202, 0x0)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r0) (async)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000640)={0x8})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'syztnl1\x00', <r4=>0x0, 0x2f, 0x0, 0x0, 0x0, 0x20, @rand_addr=' \x01\x00', @empty, 0x8707, 0x10, 0x7fff, 0xd21}})
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x24, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000) (async, rerun: 32)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
r7 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
syz_io_uring_setup(0x7636, &(0x7f0000000280)={0x0, 0x44e8, 0x208, 0x2, 0x33a}, &(0x7f0000000300), &(0x7f0000000340)=<r8=>0x0)
syz_io_uring_submit(0x0, r8, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x75, 0x0, @fd_index=0x1, 0xfffffffffffffffa, 0x6, 0x7, 0x4, 0x1, {0x2}}) (async, rerun: 32)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r6, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xc0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (rerun: 32)

09:02:21 executing program 1:
socket(0x2, 0xa, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

09:02:21 executing program 0:
socketpair(0x0, 0x1, 0x0, &(0x7f0000000000))

09:02:21 executing program 1:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x98)

09:02:21 executing program 1:
socket(0x2, 0xa, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f0000000000)="4d086a2c0c36edf0556e3aece649a726043c0b1ac974d795623a3458479121a984ec40687e472a1d5611bdba0df2d359293514bc5c051a763dcddb6b04579e74a9ef6396d5596450431c924f98e74dc76dcfae2274f7bd5807f34721ce49ea648deec709ed9c6ed1e04bcb57021e734a5641d7e0a141b5bb7a04611a9f2f0ebabec902a8d97d58ab20bf633c1de72475ee794ab334a6f42af5c4c6d49dda59cc3b611d28680cea079af4676f35b21284a123a7a616205bab949c7c0adea61b3e93080c8164c5ac4092d301b7fc9068182dbad864e7d5273d504d78a19d550dfa4acd01b2d32730ed50788738956cd6c1f16fe5357a")

09:02:21 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r1=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', r1, 0x2f, 0x20, 0x0, 0xfffffc00, 0x14, @empty, @mcast1, 0x10, 0x20, 0x3, 0x7}})
setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f00000001c0)=0x5, 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000040)={0x48})

09:02:21 executing program 0:
socketpair(0x2b, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_TID={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8008}, 0x8080)

09:02:22 executing program 0:
r0 = socket(0x2, 0xa, 0x0)
ioctl$sock_bt_hci(r0, 0x0, 0x0)

09:02:22 executing program 1:
socketpair(0x0, 0x1, 0x0, &(0x7f0000000000))

09:02:22 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r1=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', r1, 0x2f, 0x20, 0x0, 0xfffffc00, 0x14, @empty, @mcast1, 0x10, 0x20, 0x3, 0x7}})
setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f00000001c0)=0x5, 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000040)={0x48})

09:02:22 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r1=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', r1, 0x2f, 0x20, 0x0, 0xfffffc00, 0x14, @empty, @mcast1, 0x10, 0x20, 0x3, 0x7}})
setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f00000001c0)=0x5, 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000040)={0x48})
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', r1, 0x2f, 0x20, 0x0, 0xfffffc00, 0x14, @empty, @mcast1, 0x10, 0x20, 0x3, 0x7}}) (async)
setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f00000001c0)=0x5, 0x4) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000040)={0x48}) (async)

09:02:22 executing program 1:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000000))

09:02:22 executing program 0:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=""/111, 0x6f, <r1=>0x0, &(0x7f0000000080)=""/56, 0x38}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r1, 0x4)

09:02:22 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r1=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', r1, 0x2f, 0x20, 0x0, 0xfffffc00, 0x14, @empty, @mcast1, 0x10, 0x20, 0x3, 0x7}})
setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f00000001c0)=0x5, 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000040)={0x48})

09:02:22 executing program 0:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000000))

09:02:22 executing program 1:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=""/111, 0x6f, <r1=>0x0, &(0x7f0000000080)=""/56, 0x38}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r1, 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=""/111, 0x6f, 0x0, &(0x7f0000000080)=""/56, 0x38}}, 0x10) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r1, 0x4) (async)

09:02:22 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r1=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', r1, 0x2f, 0x20, 0x0, 0xfffffc00, 0x14, @empty, @mcast1, 0x10, 0x20, 0x3, 0x7}})
setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f00000001c0)=0x5, 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000040)={0x48})

[ 1002.489921][ T5209] Bluetooth: hci2: command 0x040f tx timeout
09:02:22 executing program 2:
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x101, 0x8, {<r0=>0xffffffffffffffff}, {0xee00}, 0x7, 0x5})
ptrace$setopts(0x4206, r0, 0x20000000004, 0xcb)

09:02:22 executing program 0:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0x40305839, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x71, '\x00', r2, r0, 0x1, 0x2, 0x1}, 0x48)

09:02:22 executing program 1:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000000))

09:02:22 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000000))

09:02:22 executing program 0:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))

09:02:22 executing program 2:
socketpair(0x2b, 0x1, 0x0, 0x0)

09:02:22 executing program 0:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) (async)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0x40305839, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x71, '\x00', r2, r0, 0x1, 0x2, 0x1}, 0x48)

09:02:22 executing program 1:
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x101, 0x8, {<r0=>0xffffffffffffffff}, {0xee00}, 0x7, 0x5})
ptrace$setopts(0x4206, r0, 0x20000000004, 0xcb)

09:02:22 executing program 0:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000000))

09:02:22 executing program 2:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000000)=""/236, 0xec, <r0=>0x0, &(0x7f0000000100)=""/38, 0x26}}, 0x10)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r0, 0x4)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0x40305829, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'ip6tnl0\x00', <r3=>0x0, 0x29, 0x0, 0x1c, 0x2, 0x48, @loopback, @loopback, 0x40, 0x40, 0xaf6, 0x2}})
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x9, 0x6, 0x8, 0x220, r2, 0x3, '\x00', r3, r1, 0x1, 0x5, 0x3, 0x6}, 0x48)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r1, 0x20, &(0x7f0000000340)={&(0x7f00000001c0)=""/76, 0x4c, 0x0, &(0x7f0000000240)=""/207, 0xcf}}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500))

09:02:22 executing program 1:
socketpair(0x2b, 0x1, 0x0, 0x0)

09:02:22 executing program 0:
r0 = getpid()
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x1})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000380)={0x6})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f00000000c0)={0x80000011})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, <r3=>0xffffffffffffffff}, 0x4)
kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r1, r3, 0x401})

09:02:22 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
r1 = getpid()
r2 = gettid()
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = epoll_create(0xefa)
epoll_create(0xffff3263)
kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f00000001c0)={r4})
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x110}, 0x4004400)
syz_clone(0x100000, &(0x7f00000000c0)="b6016801795f09c33d1e1057ef71599f100dd196f1", 0x15, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)="533e45b3c7956e8b3fd49aa678c1bced3ba3e5f195aee5c88479a7757ff7b358659500043c5fb92583c5249ec333dd29370299449818ffad1f4e52bfbc380f382196179ce12c362a4a5f08c9359666bf237d34dc8ce5cea1")

09:02:22 executing program 0:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000000)=""/236, 0xec, <r0=>0x0, &(0x7f0000000100)=""/38, 0x26}}, 0x10)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r0, 0x4)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) (async)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0x40305829, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'ip6tnl0\x00', <r3=>0x0, 0x29, 0x0, 0x1c, 0x2, 0x48, @loopback, @loopback, 0x40, 0x40, 0xaf6, 0x2}})
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x9, 0x6, 0x8, 0x220, r2, 0x3, '\x00', r3, r1, 0x1, 0x5, 0x3, 0x6}, 0x48)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r1, 0x20, &(0x7f0000000340)={&(0x7f00000001c0)=""/76, 0x4c, 0x0, &(0x7f0000000240)=""/207, 0xcf}}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500))

09:02:22 executing program 3:
socketpair(0x2b, 0x1, 0x0, 0x0)

09:02:22 executing program 1:
r0 = getpid() (async)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r2 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x1})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000380)={0x6}) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f00000000c0)={0x80000011}) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, <r3=>0xffffffffffffffff}, 0x4)
kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r1, r3, 0x401})

09:02:22 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000380)=0x2, 0x4) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080)=0x4)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', r1, 0x2f, 0x8d, 0x6, 0x2, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @local}, 0x20, 0x7, 0xfff, 0x8}})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)

09:02:22 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)
r1 = getpid() (async)
r2 = gettid()
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = epoll_create(0xefa)
epoll_create(0xffff3263) (async)
kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f00000001c0)={r4}) (async)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x110}, 0x4004400)
syz_clone(0x100000, &(0x7f00000000c0)="b6016801795f09c33d1e1057ef71599f100dd196f1", 0x15, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)="533e45b3c7956e8b3fd49aa678c1bced3ba3e5f195aee5c88479a7757ff7b358659500043c5fb92583c5249ec333dd29370299449818ffad1f4e52bfbc380f382196179ce12c362a4a5f08c9359666bf237d34dc8ce5cea1")

09:02:22 executing program 1:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:22 executing program 3:
socketpair(0x2b, 0x0, 0xffffffff, &(0x7f0000000980))

09:02:22 executing program 3:
socketpair(0x2, 0x0, 0x0, &(0x7f0000000980))

09:02:22 executing program 1:
socketpair(0x2b, 0x0, 0xffffffff, &(0x7f0000000980))

09:02:22 executing program 0:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:22 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, 0x0, &(0x7f0000000540))
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x8)

09:02:22 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(0x0, r1)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000200)={<r3=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000240)={r3, 0x1})
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a8508735", @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000000000000074100f17c041239433a00004c00180000000062726f6164636173742d6c696e6b000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000002a0e6e72541e58b661a7b6cb8cc607258f1ac0"], 0x68}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={<r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x24, r2, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x9b}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x40010)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), 0xffffffffffffffff)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r4)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r8, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x400d1)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r7, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000580))
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x24, r7, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x81}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x88010}, 0x14)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000080)={r5})
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f00000000c0)={0x24, 0x0, 0x404, 0x0, 0x200, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004010)
sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40011}, 0x44854)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))

09:02:22 executing program 3:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, r0, 0x1, 0x2, 0x5}, 0x48)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x84a5, 0x0, r1, 0x6, '\x00', r2, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x48)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r3=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x30000, '\x00', r3, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x48)

09:02:22 executing program 0:
socketpair(0x5, 0x0, 0x0, &(0x7f0000000980))

09:02:22 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(0x0, r1) (async)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000200)={<r3=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000240)={r3, 0x1}) (async)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a8508735", @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000000000000074100f17c041239433a00004c00180000000062726f6164636173742d6c696e6b000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000002a0e6e72541e58b661a7b6cb8cc607258f1ac0"], 0x68}}, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={<r5=>0x0}) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x24, r2, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x9b}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x40010) (async)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), 0xffffffffffffffff) (async)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r4)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r8, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x400d1) (async)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r7, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000580))
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x24, r7, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x81}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x88010}, 0x14)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000080)={r5})
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f00000000c0)={0x24, 0x0, 0x404, 0x0, 0x200, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004010) (async)
sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40011}, 0x44854)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))

09:02:22 executing program 0:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, r0, 0x1, 0x2, 0x5}, 0x48) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0}) (rerun: 64)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x84a5, 0x0, r1, 0x6, '\x00', r2, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x48)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r3=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x30000, '\x00', r3, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x48)

09:02:22 executing program 3:
socketpair(0xa, 0x0, 0x0, &(0x7f0000000980))

09:02:23 executing program 0:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x4a5620d180e4347b}, 0x14}}, 0x0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r3, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_LINK={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x100c0}, 0x44004)
connect$tipc(r1, &(0x7f0000000240)=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}, 0x4}}, 0x10)
connect$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x1, 0x3}, 0x3}}, 0x10)

09:02:23 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x5, <r0=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4)

09:02:23 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680), 0x8)

09:02:23 executing program 3:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), 0xffffffffffffffff) (rerun: 64)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x4a5620d180e4347b}, 0x14}}, 0x0) (async)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r3, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_LINK={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x100c0}, 0x44004) (async, rerun: 32)
connect$tipc(r1, &(0x7f0000000240)=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}, 0x4}}, 0x10) (async, rerun: 32)
connect$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x1, 0x3}, 0x3}}, 0x10)

09:02:23 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x5, <r0=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4)

09:02:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', <r4=>0x0, 0x29, 0x2, 0x1, 0x8, 0x41, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x80, 0x40, 0x3, 0x4}})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r3, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8, 0x1, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$tipc(r5, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e1e, 0x2}}, 0x10)

09:02:23 executing program 3:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r0, 0x20, &(0x7f0000000100)={&(0x7f0000000000)=""/139, 0x8b, <r1=>0x0, &(0x7f00000000c0)=""/49, 0x31}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl1\x00', <r2=>0x0, 0x4, 0x3, 0x17, 0x1f, 0x4a, @private0, @mcast2, 0x40, 0x1, 0x7, 0x10000000}})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x1000, 0x7, 0x4, 0x80, 0xffffffffffffffff, 0x0, '\x00', r2, r0, 0x4, 0x4, 0x4, 0xe}, 0x48)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r1, 0x4)

09:02:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', <r4=>0x0, 0x29, 0x2, 0x1, 0x8, 0x41, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x80, 0x40, 0x3, 0x4}})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r3, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8, 0x1, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$tipc(r5, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e1e, 0x2}}, 0x10)

09:02:23 executing program 3:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r0, 0x20, &(0x7f0000000100)={&(0x7f0000000000)=""/139, 0x8b, <r1=>0x0, &(0x7f00000000c0)=""/49, 0x31}}, 0x10) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl1\x00', <r2=>0x0, 0x4, 0x3, 0x17, 0x1f, 0x4a, @private0, @mcast2, 0x40, 0x1, 0x7, 0x10000000}})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x1000, 0x7, 0x4, 0x80, 0xffffffffffffffff, 0x0, '\x00', r2, r0, 0x4, 0x4, 0x4, 0xe}, 0x48) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r1, 0x4)

09:02:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', <r4=>0x0, 0x29, 0x2, 0x1, 0x8, 0x41, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x80, 0x40, 0x3, 0x4}})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r3, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8, 0x1, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$tipc(r5, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e1e, 0x2}}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) (async)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x1, 0x8, 0x41, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x80, 0x40, 0x3, 0x4}}) (async)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r3, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8, 0x1, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)) (async)
connect$tipc(r5, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e1e, 0x2}}, 0x10) (async)

[ 1003.689215][ T5209] Bluetooth: hci3: command 0x041b tx timeout
09:02:23 executing program 3:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4)
r2 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2, '\x00', r3, r0, 0x0, 0x1, 0x1}, 0x48)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', r3, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r4}, 0x4)

09:02:23 executing program 3:
syz_io_uring_setup(0x2d91, &(0x7f0000000000)={0x0, 0xbddc, 0x2, 0x0, 0xa9}, &(0x7f0000000080)=<r0=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x3b45, &(0x7f0000000100)={0x0, 0xedf0, 0x2000, 0x0, 0x2db}, &(0x7f0000000180), &(0x7f00000001c0)=<r1=>0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_WRITE={0x17, 0x50, 0x6000, @fd=r2, 0x6, &(0x7f0000000200)="732b2f18c62abe24d49106f367a097c07d952c5c02e53a14a72351da2c4bafbba9d2c13f3caeb48e769fd12d4074f948c2030ce9a8ccb2e115fab39357b94e2df55478231dd7df268c0a8e2b3bd698eb4e6fbe05164b6badaeee50805aa6aaedc99ffcae0d5ab8912a49c0a8fcd0818cbc308d9fbca9bfdfbaf864e1665d588fbabc53f30c494170d0e203e80bb598b72a1cd579418de933e96c565d9cd33a4badff0c9a4cf3637d16e8363170c7a6921922de5999c6fc0fe810ca409adc8cb3aba15035536fd5e3cb54a00f7aa65b0ffb1e9249e98f1f0ed6204cdda246443bf6abeff7c2a3", 0xe6})
socketpair(0x2a, 0x0, 0x0, &(0x7f0000000980))

09:02:23 executing program 3:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4) (async)
r2 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2, '\x00', r3, r0, 0x0, 0x1, 0x1}, 0x48) (async)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', r3, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r4}, 0x4)

09:02:23 executing program 3:
syz_io_uring_setup(0x2d91, &(0x7f0000000000)={0x0, 0xbddc, 0x2, 0x0, 0xa9}, &(0x7f0000000080)=<r0=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x3b45, &(0x7f0000000100)={0x0, 0xedf0, 0x2000, 0x0, 0x2db}, &(0x7f0000000180), &(0x7f00000001c0)=<r1=>0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_WRITE={0x17, 0x50, 0x6000, @fd=r2, 0x6, &(0x7f0000000200)="732b2f18c62abe24d49106f367a097c07d952c5c02e53a14a72351da2c4bafbba9d2c13f3caeb48e769fd12d4074f948c2030ce9a8ccb2e115fab39357b94e2df55478231dd7df268c0a8e2b3bd698eb4e6fbe05164b6badaeee50805aa6aaedc99ffcae0d5ab8912a49c0a8fcd0818cbc308d9fbca9bfdfbaf864e1665d588fbabc53f30c494170d0e203e80bb598b72a1cd579418de933e96c565d9cd33a4badff0c9a4cf3637d16e8363170c7a6921922de5999c6fc0fe810ca409adc8cb3aba15035536fd5e3cb54a00f7aa65b0ffb1e9249e98f1f0ed6204cdda246443bf6abeff7c2a3", 0xe6})
socketpair(0x2a, 0x0, 0x0, &(0x7f0000000980))

09:02:23 executing program 3:
setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000000), 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:23 executing program 3:
r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x80800)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0x3, 0x2}, 0x10)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))

09:02:23 executing program 3:
setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:23 executing program 3:
r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x80800)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0x3, 0x2}, 0x10) (async, rerun: 64)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)) (rerun: 64)

09:02:23 executing program 2:
socketpair(0xa, 0x4, 0x0, &(0x7f0000000040))

09:02:23 executing program 3:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000000)=""/128, 0x80, <r0=>0x0, &(0x7f00000005c0)=""/4096, 0x1000}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r0, 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r0, 0x4)

09:02:23 executing program 3:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f00000000c0))
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000))
syz_io_uring_setup(0x65f9, &(0x7f0000000040)={0x0, 0xb429, 0x40, 0x2, 0x1d6, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)="bcac6db8eddcc1c6e45e2703dd87c2ace9b7177c82154e44cd16de781766d781faf0d675842409cd0efe9d0b28e4591cdb92d4c81750716271ca1f3ac656a57c5d11d8b6b76df1b11a433c90087a285c07be6a1063ed300841d254e3595f4c998ae79a48644d3fb7d61bd39318c1e77378d365b4d44e88", 0x77, 0x8000})
lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:23 executing program 3:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000000)=""/128, 0x80, 0x0, &(0x7f00000005c0)=""/4096, 0x1000}}, 0x10) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000000)=""/128, 0x80, <r0=>0x0, &(0x7f00000005c0)=""/4096, 0x1000}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r0, 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r0, 0x4)

09:02:23 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f00000000c0))
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) (async)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000))
syz_io_uring_setup(0x65f9, &(0x7f0000000040)={0x0, 0xb429, 0x40, 0x2, 0x1d6, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)="bcac6db8eddcc1c6e45e2703dd87c2ace9b7177c82154e44cd16de781766d781faf0d675842409cd0efe9d0b28e4591cdb92d4c81750716271ca1f3ac656a57c5d11d8b6b76df1b11a433c90087a285c07be6a1063ed300841d254e3595f4c998ae79a48644d3fb7d61bd39318c1e77378d365b4d44e88", 0x77, 0x8000})
lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:23 executing program 3:
socketpair(0xa, 0x4, 0x0, &(0x7f0000000040))

09:02:23 executing program 1:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=<r0=>0x0, &(0x7f0000000040)=0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x48)

09:02:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, 0x0, &(0x7f0000000540))
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x8) (async)
connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x8)

09:02:23 executing program 1:
r0 = socket(0x1, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'})
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x3, 0x7f, "7394a6", 0xff, 0xff})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, 0x0, 0x0)
connect$bt_sco(r1, &(0x7f0000000040), 0x8)

09:02:23 executing program 1:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=<r0=>0x0, &(0x7f0000000040)=0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x48)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x48) (async)

09:02:23 executing program 3:
r0 = socket(0x1, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'})
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x3, 0x7f, "7394a6", 0xff, 0xff})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, 0x0, 0x0)
connect$bt_sco(r1, &(0x7f0000000040), 0x8)
socket(0x1, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) (async)
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x3, 0x7f, "7394a6", 0xff, 0xff}) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
bind$bt_sco(r1, 0x0, 0x0) (async)
connect$bt_sco(r1, &(0x7f0000000040), 0x8) (async)

09:02:23 executing program 1:
socketpair(0xa, 0x4, 0x0, &(0x7f0000000040))

09:02:23 executing program 3:
r0 = syz_clone(0x6d3e23cb36eb2aca, &(0x7f0000000000)="a914da09b811e9dc94531f7fb0c54b47ad10155b13f02494ab117c4d3a5c43307e2cfc396600311cd0401cce026a1a31aed3b65d533f04388cc1859745a29d72e367f4f6eddfa25d33e0e7255c69bdf10748524e32c2f9", 0x57, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="9732cb6ffab15cc634adef959a437ef0165bea4d56c252f67645fd635d89d2302d76aaa67d27964091f97fda782a53bd4aa3e5ce64d61c90aaa90e899c8a170a47d8cc7f703800a923c7143e64c7cdc004850b5b0bc2d30c2572d3f9f7bb77b9e54147d6a88800e7f34f9db5a7edbb1a9e865d00e349dbb61f8f05c6bb2a78439c9ed1b987a11bd948ed170300a5064a022c438aa6f375c5a51bb32960e4a0f49c1dd7702d1cf32c7c87be7559a6baf65da249c5bcb6358a9d9ab66eb91ee0a6daf973caed411d3ed5a5e0d7917a7e3511e1a2969a22e358c93f174a57263cbaaff1e381bb0842b85027f6202d2168e9444fc1360786bf29b14a750c8afefb")
r1 = epoll_create(0xfb78)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000240)={r1, r2, 0xae6})
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000280)={0x1f, @none}, 0x8)

09:02:23 executing program 3:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r2=>0x0})
ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000100)={r2, &(0x7f0000000040)=""/170})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:23 executing program 3:
syz_clone(0x6d3e23cb36eb2aca, &(0x7f0000000000)="a914da09b811e9dc94531f7fb0c54b47ad10155b13f02494ab117c4d3a5c43307e2cfc396600311cd0401cce026a1a31aed3b65d533f04388cc1859745a29d72e367f4f6eddfa25d33e0e7255c69bdf10748524e32c2f9", 0x57, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="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") (async)
r0 = syz_clone(0x6d3e23cb36eb2aca, &(0x7f0000000000)="a914da09b811e9dc94531f7fb0c54b47ad10155b13f02494ab117c4d3a5c43307e2cfc396600311cd0401cce026a1a31aed3b65d533f04388cc1859745a29d72e367f4f6eddfa25d33e0e7255c69bdf10748524e32c2f9", 0x57, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="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")
r1 = epoll_create(0xfb78)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000240)={r1, r2, 0xae6})
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000280)={0x1f, @none}, 0x8)

09:02:23 executing program 1:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) (async)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r2=>0x0})
ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000100)={r2, &(0x7f0000000040)=""/170})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:23 executing program 0:
r0 = syz_io_uring_setup(0x97c, &(0x7f0000000000)={0x0, 0x5edf, 0x800, 0x1, 0x180}, &(0x7f0000000080), &(0x7f00000000c0))
io_uring_setup(0x4b52, &(0x7f0000000100)={0x0, 0x5cd4, 0x800, 0x0, 0x393, 0x0, r0})

09:02:23 executing program 3:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x5452, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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", @ANYRES32, @ANYBLOB="08110105", @ANYRES32=0x0], 0x2c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r4)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="00022bbd7000ff00800000000a010100000000000000"], 0x1c}}, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/cgroup\x00')
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000)

09:02:23 executing program 1:
socketpair(0xf, 0x0, 0x0, &(0x7f0000000980))

[ 1004.273260][T21700] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
09:02:23 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)

09:02:23 executing program 1:
r0 = syz_io_uring_setup(0x97c, &(0x7f0000000000)={0x0, 0x5edf, 0x800, 0x1, 0x180}, &(0x7f0000000080), &(0x7f00000000c0))
io_uring_setup(0x4b52, &(0x7f0000000100)={0x0, 0x5cd4, 0x800, 0x0, 0x393, 0x0, r0})
syz_io_uring_setup(0x97c, &(0x7f0000000000)={0x0, 0x5edf, 0x800, 0x1, 0x180}, &(0x7f0000000080), &(0x7f00000000c0)) (async)
io_uring_setup(0x4b52, &(0x7f0000000100)={0x0, 0x5cd4, 0x800, 0x0, 0x393, 0x0, r0}) (async)

09:02:23 executing program 3:
socketpair(0x10, 0x0, 0x0, &(0x7f0000000980))

09:02:24 executing program 3:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x5452, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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", @ANYRES32, @ANYBLOB="08110105", @ANYRES32=0x0], 0x2c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r4)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="00022bbd7000ff00800000000a010100000000000000"], 0x1c}}, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/cgroup\x00')
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000)

09:02:24 executing program 1:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)) (async)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x5452, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x5452, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800020000000000080007006536cfff440fe3380c8cf678d7dcafa7a5c04c956a8f243d6c441b3aeb62c9bb2cfcb4d38c9196601cde7f58f9184d0acdb9f98dc62d16b1b2c68531238ef7661bea763af8bdc32b152557957d1c04a805967c12e59f6d5cb6b12d3b8e69deb99a8799e4012e133b9ddec2c686561fb646012342b98ff1daa693c9649c9c6eb5a95c9df1c19c54051150b3023811abfe6cc86663beb55b22417294236b710a5fb272ca2c8b612c77b615b8347629bd5feaa0428ea26ede265366732ee88debf3fffd8a0080000000000000e2d8575b3d00003b7bc58121b50edacedd99be20595606a6b101fa70d093e94e994f09f54fa0209212109b9a1a60bd77dc71281bc5881860b02fe89fa1a744dd1f34af66475577d101acf6679a902605aae6963572b205d42b8fa65547ce81961cc8b5b2cd23805f87c01952dcc243bccd2b8c4293e365b53c45d89046f43cee8d96d8d918068dfbe3faa37f2af68710624bdddb9ffc2be30eac871309d69a55606666d9838de21ff188f508a75bf9a5bc2c4782665c188fe729f928fd1c8c3d61ff401e3c2c5a593302ef159aaf4b7126e453f11b6e1c7abf9221ba9b8ebbe6f516ace626c470f131a745179093f163d7aecee75879b9353a632445aa5d2c0e64a901d0154c8d2762341420c950201b6eb38913be2feb3e68b078168918a47a5527deb08ca0d55419ce9653bf1c23dd7e710edf1119047a9c4b30b2bd0b6f7642e2d5c0952f296cd3f02783c73598cc7a929b", @ANYRES32, @ANYBLOB="08110105", @ANYRES32=0x0], 0x2c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r4)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="00022bbd7000ff00800000000a010100000000000000"], 0x1c}}, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/cgroup\x00')
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000)

[ 1004.360525][T21713] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1004.365893][T21715] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
09:02:24 executing program 1:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1, <r0=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4)

09:02:24 executing program 3:
r0 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@dev, @in=@dev}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8)

09:02:24 executing program 1:
socketpair(0x11, 0x0, 0x0, &(0x7f0000000980))

09:02:24 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1, <r0=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1}, 0x8) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4) (async)

09:02:24 executing program 1:
socket$igmp6(0xa, 0x3, 0x2) (async)
r0 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@dev, @in=@dev}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8)

09:02:24 executing program 3:
socketpair(0x2d, 0x0, 0x0, &(0x7f0000000980))

09:02:24 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680), 0x8)

09:02:24 executing program 3:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r2, 0x20, &(0x7f0000000040)={&(0x7f0000000000)=""/51, 0x33, <r3=>0x0, &(0x7f00000005c0)=""/4096, 0x1000}}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0xee01, 0xee00}}, './file0\x00'})
sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xc0b20002}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40890}, 0x4004001)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r3, 0xfffffffffffffe74)

09:02:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x14}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040004}, 0x0)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))

09:02:24 executing program 3:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r2, 0x20, &(0x7f0000000040)={&(0x7f0000000000)=""/51, 0x33, <r3=>0x0, &(0x7f00000005c0)=""/4096, 0x1000}}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0xee01, 0xee00}}, './file0\x00'})
sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xc0b20002}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40890}, 0x4004001)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r3, 0xfffffffffffffe74)

[ 1004.569252][ T5209] Bluetooth: hci2: command 0x040f tx timeout
09:02:24 executing program 1:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1) (async)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r2, 0x20, &(0x7f0000000040)={&(0x7f0000000000)=""/51, 0x33, <r3=>0x0, &(0x7f00000005c0)=""/4096, 0x1000}}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0xee01, 0xee00}}, './file0\x00'})
sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xc0b20002}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40890}, 0x4004001) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r3, 0xfffffffffffffe74)

09:02:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x14}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040004}, 0x0)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)) (async)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))

09:02:24 executing program 1:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r2, 0x20, &(0x7f0000000040)={&(0x7f0000000000)=""/51, 0x33, <r3=>0x0, &(0x7f00000005c0)=""/4096, 0x1000}}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0xee01, 0xee00}}, './file0\x00'})
sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xc0b20002}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40890}, 0x4004001)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r3, 0xfffffffffffffe74)

09:02:24 executing program 3:
socketpair(0x2b, 0x2, 0x0, &(0x7f0000000980))

09:02:24 executing program 3:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r0, 0x20, &(0x7f00000003c0)={&(0x7f0000000200)=""/169, 0xa9, <r1=>0x0, &(0x7f00000002c0)=""/250, 0xfa}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r1, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000000)=""/20, 0x14, <r2=>0x0, &(0x7f0000000040)=""/247, 0xf7}}, 0x10)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r2, 0x4)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x800, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, r3, 0x2, 0x3, 0x2}, 0x48)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000500)={'ip6gre0\x00', <r5=>0x0, 0x4, 0xff, 0x10, 0x7ff, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8080, 0x80, 0x7f, 0x3}})
r6 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r6)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'syztnl0\x00', r5, 0x4, 0x7a, 0x0, 0x0, 0x1a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x20, 0xb8dbd041539ac854, 0x3ff}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x7fffffff, '\x00', r5, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r7, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)

09:02:24 executing program 2:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r0, 0x20, &(0x7f00000003c0)={&(0x7f0000000200)=""/169, 0xa9, <r1=>0x0, &(0x7f00000002c0)=""/250, 0xfa}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r1, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000000)=""/20, 0x14, <r2=>0x0, &(0x7f0000000040)=""/247, 0xf7}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r2, 0x4) (async)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r2, 0x4)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x800, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, r3, 0x2, 0x3, 0x2}, 0x48)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x4, 0xff, 0x10, 0x7ff, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8080, 0x80, 0x7f, 0x3}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000500)={'ip6gre0\x00', <r5=>0x0, 0x4, 0xff, 0x10, 0x7ff, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8080, 0x80, 0x7f, 0x3}})
r6 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r6) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r6)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'syztnl0\x00', r5, 0x4, 0x7a, 0x0, 0x0, 0x1a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x20, 0xb8dbd041539ac854, 0x3ff}}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'syztnl0\x00', r5, 0x4, 0x7a, 0x0, 0x0, 0x1a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x20, 0xb8dbd041539ac854, 0x3ff}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x7fffffff, '\x00', r5, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r7, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)

09:02:24 executing program 1:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r3, 0x40305828, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000000d80)=""/199, &(0x7f0000000e80)=0xc7)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x9, [@enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x81}, {0xc, 0xff}]}, @struct={0xe, 0x8, 0x0, 0x4, 0x1, 0x50000, [{0x0, 0x3, 0x4}, {0x1, 0x5, 0x10001}, {0xc, 0x0, 0x8001}, {0x4, 0x1, 0x1}, {0x1, 0x5, 0x4}, {0x3, 0x0, 0x5}, {0x5, 0x2, 0x9}, {0x9, 0x2, 0xfffffffd}]}]}, {0x0, [0x30, 0xf2, 0x30, 0x30, 0x5f, 0x0, 0x2e]}}, &(0x7f00000002c0)=""/8, 0xa9, 0x8, 0x1, 0x80000001}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r3, 0x287, '\x00', r2, r4, 0x2, 0x4, 0x2}, 0x48)
r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f00), r3)
r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000f40)='ns/uts\x00')
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x44, r5, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8010)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r5, 0x101, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x90)

09:02:24 executing program 3:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r2, 0x20, &(0x7f0000000040)={&(0x7f0000000000)=""/51, 0x33, <r3=>0x0, &(0x7f00000005c0)=""/4096, 0x1000}}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0xee01, 0xee00}}, './file0\x00'})
sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xc0b20002}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40890}, 0x4004001)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r3, 0xfffffffffffffe74)

09:02:24 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000000))

09:02:24 executing program 2:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r3, 0x40305828, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000000d80)=""/199, &(0x7f0000000e80)=0xc7)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x9, [@enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x81}, {0xc, 0xff}]}, @struct={0xe, 0x8, 0x0, 0x4, 0x1, 0x50000, [{0x0, 0x3, 0x4}, {0x1, 0x5, 0x10001}, {0xc, 0x0, 0x8001}, {0x4, 0x1, 0x1}, {0x1, 0x5, 0x4}, {0x3, 0x0, 0x5}, {0x5, 0x2, 0x9}, {0x9, 0x2, 0xfffffffd}]}]}, {0x0, [0x30, 0xf2, 0x30, 0x30, 0x5f, 0x0, 0x2e]}}, &(0x7f00000002c0)=""/8, 0xa9, 0x8, 0x1, 0x80000001}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r3, 0x287, '\x00', r2, r4, 0x2, 0x4, 0x2}, 0x48) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f00), r3) (async, rerun: 32)
r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000f40)='ns/uts\x00')
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x44, r5, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8010) (async, rerun: 32)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r5, 0x101, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x90) (rerun: 32)

09:02:24 executing program 3:
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r2 = getpgid(0xffffffffffffffff)
r3 = getpgid(0xffffffffffffffff)
r4 = epoll_create1(0x80000)
r5 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f00000000c0)=0x10, 0x80000)
kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000100)={r4, r5, 0xffffff81})

09:02:24 executing program 1:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)

09:02:24 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000000))

09:02:24 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'})
r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008845}, 0x4)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x2, 0x401, "281646", 0x3f, 0xc4})

09:02:24 executing program 1:
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, <r1=>0xffffffffffffffff}, 0x4) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) (async)
r2 = getpgid(0xffffffffffffffff) (async)
r3 = getpgid(0xffffffffffffffff) (async)
r4 = epoll_create1(0x80000) (async, rerun: 32)
r5 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f00000000c0)=0x10, 0x80000) (rerun: 32)
kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000100)={r4, r5, 0xffffff81})

09:02:24 executing program 2:
socketpair(0x2b, 0x3, 0x0, &(0x7f0000000980))

09:02:24 executing program 3:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)

09:02:24 executing program 0:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)

09:02:24 executing program 2:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000000))
r1 = socket(0x29, 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r1)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0)
connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8)

09:02:24 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'})
syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008845}, 0x4)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x2, 0x401, "281646", 0x3f, 0xc4})

09:02:24 executing program 3:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f00000005c0)=""/4096, 0x1000, <r0=>0x0, &(0x7f0000000000)=""/247, 0xf7}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r0, 0xffffffffffffff53)

09:02:24 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)

09:02:24 executing program 1:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f00000005c0)=""/4096, 0x1000, <r0=>0x0, &(0x7f0000000000)=""/247, 0xf7}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r0, 0xffffffffffffff53) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r0, 0xffffffffffffff53)

09:02:24 executing program 0:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x8, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x2050)

09:02:24 executing program 1:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)

[ 1005.202630][   T38] audit: type=1400 audit(1710925344.870:280): avc:  denied  { connect } for  pid=21781 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
09:02:24 executing program 0:
r0 = socket$tipc(0x1e, 0x5, 0x0)
accept4$tipc(r0, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x80000)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:24 executing program 1:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x8, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x2050) (async)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x8, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x2050)

09:02:24 executing program 0:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)

09:02:24 executing program 1:
r0 = socket$tipc(0x1e, 0x5, 0x0)
accept4$tipc(r0, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x80000)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
socket$tipc(0x1e, 0x5, 0x0) (async)
accept4$tipc(r0, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x80000) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) (async)

09:02:24 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x293d}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xd30}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0)
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xee01, <r3=>0x0}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {r2, r3}}, './file0\x00'})
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))
socket$nl_generic(0x10, 0x3, 0x10)

09:02:24 executing program 1:
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)

09:02:24 executing program 0:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x6, @bearer=@udp='udp:syz2\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x88000)

09:02:25 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x293d}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xd30}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 32)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) (rerun: 32)
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xee01, <r3=>0x0}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {r2, r3}}, './file0\x00'})
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)

09:02:25 executing program 1:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x6, @bearer=@udp='udp:syz2\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x88000)

09:02:25 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x30}, 0x20040080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), 0xffffffffffffffff)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000500)='ns/user\x00')
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000680)={&(0x7f0000000480), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x24044094)
socketpair(0x29, 0x0, 0x1, &(0x7f0000000980)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r6)
r7 = socket(0x10, 0x3, 0x0)
connect$bt_sco(r7, &(0x7f0000000140)={0x1f, @none}, 0x8)
sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x20004000)

09:02:25 executing program 1:
gettid()
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)

09:02:25 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x30}, 0x20040080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), 0xffffffffffffffff)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000500)='ns/user\x00')
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000680)={&(0x7f0000000480), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x24044094)
socketpair(0x29, 0x0, 0x1, &(0x7f0000000980)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r6)
r7 = socket(0x10, 0x3, 0x0)
connect$bt_sco(r7, &(0x7f0000000140)={0x1f, @none}, 0x8)
sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x20004000)

[ 1005.540268][ T5206] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1005.546120][ T5206] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1005.550819][ T5206] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1005.557262][ T5206] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1005.561369][ T5206] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1005.564962][ T5206] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
09:02:25 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x30}, 0x20040080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), 0xffffffffffffffff)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000500)='ns/user\x00')
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000680)={&(0x7f0000000480), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x24044094)
socketpair(0x29, 0x0, 0x1, &(0x7f0000000980)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r6)
r7 = socket(0x10, 0x3, 0x0)
connect$bt_sco(r7, &(0x7f0000000140)={0x1f, @none}, 0x8)
sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x20004000)

09:02:25 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x30}, 0x20040080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), 0xffffffffffffffff)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000500)='ns/user\x00')
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000680)={&(0x7f0000000480), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x24044094)
socketpair(0x29, 0x0, 0x1, &(0x7f0000000980)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r6)
r7 = socket(0x10, 0x3, 0x0)
connect$bt_sco(r7, &(0x7f0000000140)={0x1f, @none}, 0x8)
sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x20004000)

09:02:25 executing program 1:
gettid()
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)

[ 1005.704052][T21826] chnl_net:caif_netlink_parms(): no params data found
09:02:25 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x30}, 0x20040080)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), 0xffffffffffffffff)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000500)='ns/user\x00') (async)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000500)='ns/user\x00')
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000680)={&(0x7f0000000480), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x24044094)
socketpair(0x29, 0x0, 0x1, &(0x7f0000000980)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r6)
r7 = socket(0x10, 0x3, 0x0)
connect$bt_sco(r7, &(0x7f0000000140)={0x1f, @none}, 0x8) (async)
connect$bt_sco(r7, &(0x7f0000000140)={0x1f, @none}, 0x8)
sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x20004000)

09:02:25 executing program 1:
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x4, <r0=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r0, 0x4)

09:02:25 executing program 1:
ustat(0xfffffffffffffff7, &(0x7f0000000080))
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000000)={0x1})
connect$tipc(r1, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x1, 0x4}}}, 0x10)

09:02:25 executing program 1:
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x4, <r0=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r0, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x4}, 0x8) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r0, 0x4) (async)

[ 1005.834564][   T80] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1005.845977][T21826] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1005.849533][T21826] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1005.853027][T21826] bridge_slave_0: entered allmulticast mode
09:02:25 executing program 1:
ustat(0xfffffffffffffff7, &(0x7f0000000080)) (async)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000000)={0x1})
connect$tipc(r1, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x1, 0x4}}}, 0x10)

[ 1005.857644][T21826] bridge_slave_0: entered promiscuous mode
[ 1005.864156][T21826] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1005.867513][T21826] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1005.871374][T21826] bridge_slave_1: entered allmulticast mode
[ 1005.875520][T21826] bridge_slave_1: entered promiscuous mode
09:02:25 executing program 1:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xfff, <r0=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4)

09:02:25 executing program 1:
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='m', 0x1, 0xfffffffffffffffd)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))

09:02:25 executing program 1:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xfff, <r0=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4)

[ 1005.943622][   T80] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1005.954816][T21826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1005.962839][T21826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
09:02:25 executing program 1:
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='m', 0x1, 0xfffffffffffffffd) (async)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))

09:02:25 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x109202, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000011c0)={0xffffffffffffffff, 0x20, &(0x7f0000001180)={&(0x7f0000000080)=""/202, 0xca, <r1=>0x0, &(0x7f0000000180)=""/4096, 0x1000}}, 0x10)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x4, 0x3, {<r2=>0x0}, {0xee00}, 0x2, 0xe})
r3 = gettid()
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x60}, 0x0)
r5 = epoll_create1(0x0)
epoll_pwait(r5, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000240)={r5, r6, 0x5})
r7 = socket$inet6(0xa, 0x6, 0x7)
r8 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8)
r10 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r10, 0x40305828, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r10, 0x11, 0x1, &(0x7f0000000d80)=""/199, &(0x7f0000000e80)=0xc7)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x81}, {0xc, 0x100}]}, @struct={0xe, 0x0, 0x0, 0x4, 0x1, 0x50000}]}, {0x0, [0x30, 0xf2, 0x30, 0x30, 0x5f, 0x0, 0x2e]}}, &(0x7f00000002c0)=""/8, 0x49, 0x8, 0x1, 0x474}, 0x20)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff)
r12 = syz_genetlink_get_family_id$gtp(&(0x7f00000012c0), r4)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x2c, r12, 0x10, 0x70bd26, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r10}, @GTPA_O_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r10, 0x287, '\x00', r9, r11, 0x2, 0x4, 0x2}, 0x48)
r13 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f00), r10)
r14 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000f40)='ns/uts\x00')
sendmsg$GTP_CMD_NEWPDP(r10, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x44, r13, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_NET_NS_FD={0x8, 0x7, r14}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8010)
ioctl$DRM_IOCTL_ADD_CTX(r11, 0xc0086420, &(0x7f0000000cc0)={<r15=>0x0})
ioctl$DRM_IOCTL_SWITCH_CTX(r10, 0x40086424, &(0x7f0000000d00)={r15, 0x2})
syz_io_uring_setup(0x49a8, &(0x7f0000000680)={0x0, 0xa26a, 0x10, 0x1, 0x17b, 0x0, r10}, &(0x7f0000000700), &(0x7f0000000740))
syz_io_uring_setup(0x10f9, &(0x7f0000000780)={0x0, 0x89a3, 0x1, 0x0, 0x1f7, 0x0, r10}, &(0x7f0000000800), &(0x7f0000000840))
kcmp$KCMP_EPOLL_TFD(r3, 0x0, 0x7, r7, &(0x7f0000001200)={r10, r0, 0x8})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r1, 0x4)

09:02:25 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000000))
r1 = socket(0x29, 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r1)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0)
connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000000)) (async)
socket(0x29, 0x2, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r1) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) (async)
connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) (async)

09:02:25 executing program 3:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00@\x00', @ANYRES16=r2, @ANYBLOB="020026bd7000fedbdf250200000008000400ac1414aa08000800020000000c0003000100000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x2004c001)

[ 1006.035149][T21826] team0: Port device team_slave_0 added
[ 1006.042552][   T80] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1006.050988][T21826] team0: Port device team_slave_1 added
09:02:25 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x100102, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000))
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={<r1=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000080)={r1, 0x2})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:25 executing program 2:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00@\x00', @ANYRES16=r2, @ANYBLOB="020026bd7000fedbdf250200000008000400ac1414aa08000800020000000c0003000100000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x2004c001)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) (async)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, 0x0, 0x0) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) (async)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00@\x00', @ANYRES16=r2, @ANYBLOB="020026bd7000fedbdf250200000008000400ac1414aa08000800020000000c0003000100000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x2004c001) (async)

09:02:25 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x109202, 0x0) (async, rerun: 64)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000011c0)={0xffffffffffffffff, 0x20, &(0x7f0000001180)={&(0x7f0000000080)=""/202, 0xca, <r1=>0x0, &(0x7f0000000180)=""/4096, 0x1000}}, 0x10) (async, rerun: 64)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x4, 0x3, {<r2=>0x0}, {0xee00}, 0x2, 0xe})
r3 = gettid() (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x60}, 0x0) (async)
r5 = epoll_create1(0x0)
epoll_pwait(r5, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000240)={r5, r6, 0x5}) (async)
r7 = socket$inet6(0xa, 0x6, 0x7) (async)
r8 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8)
r10 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r10, 0x40305828, 0x0) (async)
getsockopt$bt_sco_SCO_OPTIONS(r10, 0x11, 0x1, &(0x7f0000000d80)=""/199, &(0x7f0000000e80)=0xc7)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x81}, {0xc, 0x100}]}, @struct={0xe, 0x0, 0x0, 0x4, 0x1, 0x50000}]}, {0x0, [0x30, 0xf2, 0x30, 0x30, 0x5f, 0x0, 0x2e]}}, &(0x7f00000002c0)=""/8, 0x49, 0x8, 0x1, 0x474}, 0x20)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff)
r12 = syz_genetlink_get_family_id$gtp(&(0x7f00000012c0), r4)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x2c, r12, 0x10, 0x70bd26, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r10}, @GTPA_O_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r10, 0x287, '\x00', r9, r11, 0x2, 0x4, 0x2}, 0x48)
r13 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f00), r10) (async)
r14 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000f40)='ns/uts\x00')
sendmsg$GTP_CMD_NEWPDP(r10, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x44, r13, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_NET_NS_FD={0x8, 0x7, r14}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8010) (async, rerun: 64)
ioctl$DRM_IOCTL_ADD_CTX(r11, 0xc0086420, &(0x7f0000000cc0)={<r15=>0x0}) (rerun: 64)
ioctl$DRM_IOCTL_SWITCH_CTX(r10, 0x40086424, &(0x7f0000000d00)={r15, 0x2})
syz_io_uring_setup(0x49a8, &(0x7f0000000680)={0x0, 0xa26a, 0x10, 0x1, 0x17b, 0x0, r10}, &(0x7f0000000700), &(0x7f0000000740)) (async)
syz_io_uring_setup(0x10f9, &(0x7f0000000780)={0x0, 0x89a3, 0x1, 0x0, 0x1f7, 0x0, r10}, &(0x7f0000000800), &(0x7f0000000840)) (async)
kcmp$KCMP_EPOLL_TFD(r3, 0x0, 0x7, r7, &(0x7f0000001200)={r10, r0, 0x8})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r1, 0x4)

09:02:25 executing program 3:
socketpair(0x2b, 0x4, 0x0, &(0x7f0000000980))

[ 1006.121749][T21826] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1006.124643][T21826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1006.135619][T21826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
09:02:25 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x100102, 0x0) (async)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) (async)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={<r1=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000080)={r1, 0x2}) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:25 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x1})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x40002018})
r3 = epoll_create1(0x80000)
syz_open_dev$MSR(&(0x7f0000000100), 0x10001, 0x0)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', 0x0, r1, 0x800, 0x0, 0x5}, 0x48)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000140)={0x60000011})
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000180)={0x9})
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0x0, &(0x7f00000000c0))

09:02:25 executing program 2:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000000)=""/74, 0x4a, <r0=>0x0, &(0x7f0000000080)=""/190, 0xbe}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r0, 0x4)

[ 1006.159546][   T80] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
09:02:25 executing program 3:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000227bd7000fbdbdf250700000008000a000300000006000e00f8ff00000c000f000200000000000000631bfbf1d66499c2cf013c14398f634647c59affc1072f8852e21853832ea455907b8a18d6d2d9a08f740b2f31d68f6ec69fd79428d5a672a56835a3b23abab5f42defe46f95c20f55fe5c39c31deee4724f2f7c2def20a92e4667f6fe189e4ce8831d5831808ead906bc4f71e35c3f9e37024de1e150f9808fe338a472488ddf5aa6931bf386104fbada4267163838fcc8ad922272bd3ae475ae1d55fa2d006a8684830b09c109bc632fad13b800ba17bf6c38e880a9cf08cd525"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x1)

09:02:25 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)

[ 1006.170690][T21826] batman_adv: batadv0: Adding interface: batadv_slave_1
09:02:25 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x1})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x40002018})
r3 = epoll_create1(0x80000)
syz_open_dev$MSR(&(0x7f0000000100), 0x10001, 0x0)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', 0x0, r1, 0x800, 0x0, 0x5}, 0x48)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000140)={0x60000011})
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000180)={0x9})
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0x0, &(0x7f00000000c0))

[ 1006.174240][T21826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
09:02:25 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x1})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x40002018})
r3 = epoll_create1(0x80000)
syz_open_dev$MSR(&(0x7f0000000100), 0x10001, 0x0)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', 0x0, r1, 0x800, 0x0, 0x5}, 0x48)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000140)={0x60000011})
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000180)={0x9})
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0x0, &(0x7f00000000c0))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
epoll_create(0x1f) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x1}) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x40002018}) (async)
epoll_create1(0x80000) (async)
syz_open_dev$MSR(&(0x7f0000000100), 0x10001, 0x0) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', 0x0, r1, 0x800, 0x0, 0x5}, 0x48) (async)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000140)={0x60000011}) (async)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000180)={0x9}) (async)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0x0, &(0x7f00000000c0)) (async)

[ 1006.193071][T21826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
09:02:25 executing program 3:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000000)=""/74, 0x4a, <r0=>0x0, &(0x7f0000000080)=""/190, 0xbe}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r0, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000000)=""/74, 0x4a, 0x0, &(0x7f0000000080)=""/190, 0xbe}}, 0x10) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r0, 0x4) (async)

09:02:25 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x1})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x40002018})
r3 = epoll_create1(0x80000)
syz_open_dev$MSR(&(0x7f0000000100), 0x10001, 0x0)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', 0x0, r1, 0x800, 0x0, 0x5}, 0x48)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000140)={0x60000011})
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000180)={0x9})
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0x0, &(0x7f00000000c0))

09:02:25 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
connect$bt_sco(r0, &(0x7f0000000080), 0x8)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:25 executing program 2:
r0 = socket$tipc(0x1e, 0x2, 0x0)
getpeername$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

[ 1006.274048][T21826] hsr_slave_0: entered promiscuous mode
[ 1006.278654][T21826] hsr_slave_1: entered promiscuous mode
[ 1006.284837][T21826] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1006.288468][T21826] Cannot create hsr debugfs directory
09:02:25 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x1})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x40002018})
r3 = epoll_create1(0x80000)
syz_open_dev$MSR(&(0x7f0000000100), 0x10001, 0x0)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', 0x0, r1, 0x800, 0x0, 0x5}, 0x48)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000140)={0x60000011})
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000180)={0x9})
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0x0, &(0x7f00000000c0))

09:02:26 executing program 2:
r0 = socket$tipc(0x1e, 0x2, 0x0)
getpeername$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:26 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x1})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x40002018})

09:02:26 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0x40305828, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000d80)=""/199, &(0x7f0000000e80)=0xc7)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x9, [@enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x81}, {0xc, 0xff}]}, @struct={0xe, 0x8, 0x0, 0x4, 0x1, 0x50000, [{0x0, 0x3, 0x4}, {0x1, 0x5, 0x10001}, {0xc, 0x0, 0x8001}, {0x4, 0x1, 0x1}, {0x1, 0x5, 0x4}, {0x3, 0x0, 0x5}, {0x5, 0x2, 0x9}, {0x9, 0x2, 0xfffffffd}]}]}, {0x0, [0x30, 0xf2, 0x30, 0x30, 0x5f, 0x0, 0x2e]}}, &(0x7f00000002c0)=""/8, 0xa9, 0x8, 0x1, 0x80000001}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r2, 0x287, '\x00', r1, r3, 0x2, 0x4, 0x2}, 0x48)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f00), r2)
r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000f40)='ns/uts\x00')
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x44, r4, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8010)
ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000cc0)={<r6=>0x0})
ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000d00)={r6, 0x2})
syz_io_uring_setup(0x49a8, &(0x7f0000000680)={0x0, 0xa26a, 0x10, 0x1, 0x17b, 0x0, r2}, &(0x7f0000000700), &(0x7f0000000740))
syz_io_uring_setup(0x10f9, &(0x7f0000000780)={0x0, 0x89a3, 0x1, 0x0, 0x1f7, 0x0, r2}, &(0x7f0000000800), &(0x7f0000000840))
r7 = syz_io_uring_setup(0x47e8, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0))
r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r7)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1, r8})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:26 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002018})

[ 1006.449562][   T80] bridge_slave_1: left allmulticast mode
[ 1006.452198][   T80] bridge_slave_1: left promiscuous mode
[ 1006.454866][   T80] bridge0: port 2(bridge_slave_1) entered disabled state
09:02:26 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0x40305828, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000d80)=""/199, &(0x7f0000000e80)=0xc7)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x9, [@enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x81}, {0xc, 0xff}]}, @struct={0xe, 0x8, 0x0, 0x4, 0x1, 0x50000, [{0x0, 0x3, 0x4}, {0x1, 0x5, 0x10001}, {0xc, 0x0, 0x8001}, {0x4, 0x1, 0x1}, {0x1, 0x5, 0x4}, {0x3, 0x0, 0x5}, {0x5, 0x2, 0x9}, {0x9, 0x2, 0xfffffffd}]}]}, {0x0, [0x30, 0xf2, 0x30, 0x30, 0x5f, 0x0, 0x2e]}}, &(0x7f00000002c0)=""/8, 0xa9, 0x8, 0x1, 0x80000001}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r2, 0x287, '\x00', r1, r3, 0x2, 0x4, 0x2}, 0x48)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f00), r2)
r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000f40)='ns/uts\x00')
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x44, r4, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8010)
ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000cc0)={<r6=>0x0})
ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000d00)={r6, 0x2})
syz_io_uring_setup(0x49a8, &(0x7f0000000680)={0x0, 0xa26a, 0x10, 0x1, 0x17b, 0x0, r2}, &(0x7f0000000700), &(0x7f0000000740))
syz_io_uring_setup(0x10f9, &(0x7f0000000780)={0x0, 0x89a3, 0x1, 0x0, 0x1f7, 0x0, r2}, &(0x7f0000000800), &(0x7f0000000840))
r7 = syz_io_uring_setup(0x47e8, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0))
r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r7)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1, r8})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

[ 1006.465383][   T80] bridge_slave_0: left allmulticast mode
[ 1006.468079][   T80] bridge_slave_0: left promiscuous mode
[ 1006.473577][   T80] bridge0: port 1(bridge_slave_0) entered disabled state
09:02:26 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x40002018})

09:02:26 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0x40305828, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000d80)=""/199, &(0x7f0000000e80)=0xc7)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x9, [@enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x81}, {0xc, 0xff}]}, @struct={0xe, 0x8, 0x0, 0x4, 0x1, 0x50000, [{0x0, 0x3, 0x4}, {0x1, 0x5, 0x10001}, {0xc, 0x0, 0x8001}, {0x4, 0x1, 0x1}, {0x1, 0x5, 0x4}, {0x3, 0x0, 0x5}, {0x5, 0x2, 0x9}, {0x9, 0x2, 0xfffffffd}]}]}, {0x0, [0x30, 0xf2, 0x30, 0x30, 0x5f, 0x0, 0x2e]}}, &(0x7f00000002c0)=""/8, 0xa9, 0x8, 0x1, 0x80000001}, 0x20) (async)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x9, [@enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x81}, {0xc, 0xff}]}, @struct={0xe, 0x8, 0x0, 0x4, 0x1, 0x50000, [{0x0, 0x3, 0x4}, {0x1, 0x5, 0x10001}, {0xc, 0x0, 0x8001}, {0x4, 0x1, 0x1}, {0x1, 0x5, 0x4}, {0x3, 0x0, 0x5}, {0x5, 0x2, 0x9}, {0x9, 0x2, 0xfffffffd}]}]}, {0x0, [0x30, 0xf2, 0x30, 0x30, 0x5f, 0x0, 0x2e]}}, &(0x7f00000002c0)=""/8, 0xa9, 0x8, 0x1, 0x80000001}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r2, 0x287, '\x00', r1, r3, 0x2, 0x4, 0x2}, 0x48)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f00), r2)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000f40)='ns/uts\x00') (async)
r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000f40)='ns/uts\x00')
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x44, r4, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8010)
ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000cc0)) (async)
ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000cc0)={<r6=>0x0})
ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000d00)={r6, 0x2}) (async)
ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000d00)={r6, 0x2})
syz_io_uring_setup(0x49a8, &(0x7f0000000680)={0x0, 0xa26a, 0x10, 0x1, 0x17b, 0x0, r2}, &(0x7f0000000700), &(0x7f0000000740))
syz_io_uring_setup(0x10f9, &(0x7f0000000780)={0x0, 0x89a3, 0x1, 0x0, 0x1f7, 0x0, r2}, &(0x7f0000000800), &(0x7f0000000840))
syz_io_uring_setup(0x47e8, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async)
r7 = syz_io_uring_setup(0x47e8, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0))
r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r7) (async)
epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r7)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1, r8})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:26 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x40002018})

09:02:26 executing program 2:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4)
r2 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3ff, '\x00', r3, r4, 0x4, 0x4}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x3, '\x00', r3, r0, 0x3, 0x2, 0x5}, 0x48)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xcc180, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@ipv4={""/10, ""/2, @local}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@private0}}, &(0x7f0000000240)=0xe8)
ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f0000000040)={0xc, <r6=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000280)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1})

[ 1006.649347][ T5209] Bluetooth: hci2: command 0x040f tx timeout
[ 1006.675138][   T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1006.684275][   T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1006.692082][   T80] bond0 (unregistering): Released all slaves
09:02:26 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x40002018})

09:02:26 executing program 2:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4)
r2 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3ff, '\x00', r3, r4, 0x4, 0x4}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x3, '\x00', r3, r0, 0x3, 0x2, 0x5}, 0x48)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xcc180, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@ipv4={""/10, ""/2, @local}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@private0}}, &(0x7f0000000240)=0xe8)
ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f0000000040)={0xc, <r6=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000280)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3ff, '\x00', r3, r4, 0x4, 0x4}, 0x48) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x3, '\x00', r3, r0, 0x3, 0x2, 0x5}, 0x48) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xcc180, 0x0) (async)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@ipv4={""/10, ""/2, @local}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@private0}}, &(0x7f0000000240)=0xe8) (async)
ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f0000000040)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000280)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) (async)

09:02:26 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002018})

09:02:26 executing program 2:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000000)=""/94, 0x5e, <r0=>0x0, &(0x7f0000000080)=""/82, 0x52}}, 0x10)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r0, 0x4)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r2=>0x0, 0x4, 0x7, 0x0, 0x9, 0x7b, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x34}, 0x0, 0x1, 0xfffffff7, 0xffff}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', r2, r1, 0x4}, 0x48)

09:02:26 executing program 2:
r0 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x40002018})

09:02:26 executing program 2:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000000)=""/94, 0x5e, <r0=>0x0, &(0x7f0000000080)=""/82, 0x52}}, 0x10)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r0, 0x4)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x0, 0x9, 0x7b, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x34}, 0x0, 0x1, 0xfffffff7, 0xffff}}) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', <r2=>0x0, 0x4, 0x7, 0x0, 0x9, 0x7b, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x34}, 0x0, 0x1, 0xfffffff7, 0xffff}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', r2, r1, 0x4}, 0x48)

09:02:26 executing program 2:
r0 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x40002018})

09:02:26 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xec}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x820)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x58f39fd03b782a8c}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040628bd7000ffdbdf250200000005002100010000000c001600000001000000000006000300070000000800090004000000060002000000000005000d000100000006001d008000000006000200010000000c001600040000000000000006000e0006000000745045b3346d8feab418cd07fc5ac322c2934b654fd453124c17a08ccffb8f40d71f5ba374d92bd4077243d8afe8afe91ff96cffae2ea65cda4a9de75fc7dd4131898e19d0d700ed6a6b809024f717eb9c79e9f8c9442fd96ec073423431571cdd7299e1a41cb75477ae2c75d505283e9527cd8d98e3a111c0217c770a"], 0x6c}, 0x1, 0x0, 0x0, 0x4008040}, 0x14)

09:02:26 executing program 2:
r0 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x40002018})

09:02:26 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xec}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x820)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x58f39fd03b782a8c}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040628bd7000ffdbdf250200000005002100010000000c001600000001000000000006000300070000000800090004000000060002000000000005000d000100000006001d008000000006000200010000000c001600040000000000000006000e0006000000745045b3346d8feab418cd07fc5ac322c2934b654fd453124c17a08ccffb8f40d71f5ba374d92bd4077243d8afe8afe91ff96cffae2ea65cda4a9de75fc7dd4131898e19d0d700ed6a6b809024f717eb9c79e9f8c9442fd96ec073423431571cdd7299e1a41cb75477ae2c75d505283e9527cd8d98e3a111c0217c770a"], 0x6c}, 0x1, 0x0, 0x0, 0x4008040}, 0x14) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x58f39fd03b782a8c}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040628bd7000ffdbdf250200000005002100010000000c001600000001000000000006000300070000000800090004000000060002000000000005000d000100000006001d008000000006000200010000000c001600040000000000000006000e0006000000745045b3346d8feab418cd07fc5ac322c2934b654fd453124c17a08ccffb8f40d71f5ba374d92bd4077243d8afe8afe91ff96cffae2ea65cda4a9de75fc7dd4131898e19d0d700ed6a6b809024f717eb9c79e9f8c9442fd96ec073423431571cdd7299e1a41cb75477ae2c75d505283e9527cd8d98e3a111c0217c770a"], 0x6c}, 0x1, 0x0, 0x0, 0x4008040}, 0x14)

09:02:26 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = epoll_create(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002018})

09:02:26 executing program 1:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000227bd7000fbdbdf250700000008000a000300000006000e00f8ff00000c000f000200000000000000631bfbf1d66499c2cf013c14398f634647c59affc1072f8852e21853832ea455907b8a18d6d2d9a08f740b2f31d68f6ec69fd79428d5a672a56835a3b23abab5f42defe46f95c20f55fe5c39c31deee4724f2f7c2def20a92e4667f6fe189e4ce8831d5831808ead906bc4f71e35c3f9e37024de1e150f9808fe338a472488ddf5aa6931bf386104fbada4267163838fcc8ad922272bd3ae475ae1d55fa2d006a8684830b09c109bc632fad13b800ba17bf6c38e880a9cf08cd525"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x1)

09:02:26 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async)

[ 1007.052946][   T80] hsr_slave_0: left promiscuous mode
[ 1007.056306][   T80] hsr_slave_1: left promiscuous mode
[ 1007.061680][   T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1007.065168][   T80] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1007.069523][   T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1007.072658][   T80] batman_adv: batadv0: Removing interface: batadv_slave_1
09:02:26 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = epoll_create(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002018})

[ 1007.080831][   T80] veth1_macvtap: left promiscuous mode
[ 1007.083721][   T80] veth0_macvtap: left promiscuous mode
[ 1007.086446][   T80] veth1_vlan: left promiscuous mode
[ 1007.089005][   T80] veth0_vlan: left promiscuous mode
09:02:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000)
r2 = epoll_create(0x5)
epoll_pwait(r2, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0xa4, &(0x7f0000000080)={[0x8]}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:26 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
connect$bt_sco(r0, &(0x7f0000000080), 0x8)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

[ 1007.263760][   T80] team0 (unregistering): Port device team_slave_1 removed
[ 1007.274393][   T80] team0 (unregistering): Port device team_slave_0 removed
09:02:26 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = epoll_create(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002018})

09:02:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) (async)
r2 = epoll_create(0x5)
epoll_pwait(r2, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0xa4, &(0x7f0000000080)={[0x8]}, 0x8) (async, rerun: 32)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) (async, rerun: 32)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

[ 1007.532679][T21826] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1007.539927][T21826] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1007.547495][T21826] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1007.553913][T21826] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1007.609760][ T5209] Bluetooth: hci4: command tx timeout
[ 1007.619522][T21826] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1007.642895][T21826] 8021q: adding VLAN 0 to HW filter on device team0
[ 1007.662266][ T5244] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1007.665359][ T5244] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1007.671843][ T5244] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1007.675341][ T5244] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1007.706629][T21826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1007.714344][T21826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1007.861919][T21826] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1007.897355][T21826] veth0_vlan: entered promiscuous mode
09:02:27 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x40002018})

[ 1007.916594][T21826] veth1_vlan: entered promiscuous mode
[ 1007.941968][T21826] veth0_macvtap: entered promiscuous mode
09:02:27 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = epoll_create(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002018})

[ 1007.946880][T21826] veth1_macvtap: entered promiscuous mode
[ 1007.956874][T21826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1007.961773][T21826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1007.965746][T21826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1007.969960][T21826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1007.974150][T21826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1007.978673][T21826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1007.983619][T21826] batman_adv: batadv0: Interface activated: batadv_slave_0
09:02:27 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x40002018})

[ 1007.988791][T21826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1007.993715][T21826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
09:02:27 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000), 0x8)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8)
connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

[ 1007.997353][T21826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1008.002258][T21826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1008.005966][T21826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1008.010062][T21826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1008.016314][T21826] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1008.028168][T21826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
09:02:27 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000540))
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)

[ 1008.031656][T21826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1008.035632][T21826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1008.038854][T21826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
09:02:27 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x40002018})

[ 1008.095237][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1008.099961][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:02:27 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x40002018})

[ 1008.131387][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1008.135165][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:02:27 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000540))
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)

09:02:27 executing program 0:
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)

09:02:27 executing program 3:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x40002018})

09:02:27 executing program 0:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000540)) (rerun: 32)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)

09:02:27 executing program 1:
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)

09:02:27 executing program 1:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)

09:02:27 executing program 0:
r0 = socket(0x0, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)

09:02:27 executing program 3:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000002580)=""/4097, 0xfffffffffffffcdf, <r0=>0x0, &(0x7f0000000140)=""/111, 0x6f}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r0, 0x4)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0x0, &(0x7f0000000540))
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000000000000c"], 0x30}}, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r3)

09:02:27 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x40002018})

09:02:27 executing program 3:
socketpair(0x28, 0x800, 0xbfc6, &(0x7f0000000000))

09:02:27 executing program 0:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000002580)=""/4097, 0xfffffffffffffcdf, 0x0, &(0x7f0000000140)=""/111, 0x6f}}, 0x10) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000002580)=""/4097, 0xfffffffffffffcdf, <r0=>0x0, &(0x7f0000000140)=""/111, 0x6f}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r0, 0x4)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0x0, &(0x7f0000000540))
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000000000000c"], 0x30}}, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r3) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r3)

09:02:27 executing program 1:
r0 = socket(0x0, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)

09:02:27 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0)

09:02:27 executing program 0:
socketpair(0x28, 0x800, 0xbfc6, &(0x7f0000000000))

09:02:28 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
connect$bt_sco(r0, &(0x7f0000000140)={0x1f, @none}, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @none}, 0x8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000329bd7000fcdbdf250100000000000000014100000018001700000006000000077564703a73797a3000000000b30bb5c1ff258aa693bd52"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)

09:02:28 executing program 3:
r0 = socket(0x0, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)

09:02:28 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0)

09:02:28 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0)

09:02:28 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
connect$bt_sco(r0, &(0x7f0000000140)={0x1f, @none}, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @none}, 0x8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000329bd7000fcdbdf250100000000000000014100000018001700000006000000077564703a73797a3000000000b30bb5c1ff258aa693bd52"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)
connect$bt_sco(r0, &(0x7f0000000140)={0x1f, @none}, 0x8) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async)
connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @none}, 0x8) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000329bd7000fcdbdf250100000000000000014100000018001700000006000000077564703a73797a3000000000b30bb5c1ff258aa693bd52"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async)

09:02:28 executing program 1:
r0 = socket(0x23, 0x0, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)

09:02:28 executing program 0:
prctl$PR_SET_ENDIAN(0x14, 0x0)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000000))

09:02:28 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0)

09:02:28 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000000))

09:02:28 executing program 0:
r0 = socket(0x23, 0x0, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)

09:02:28 executing program 3:
prctl$PR_SET_ENDIAN(0x14, 0x0)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000000))

09:02:28 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040))

09:02:28 executing program 0:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000000))

09:02:28 executing program 3:
r0 = socket(0x23, 0x0, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)

[ 1008.729401][ T5209] Bluetooth: hci2: command 0x040f tx timeout
09:02:28 executing program 2:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)

09:02:28 executing program 1:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r0, {0xee00, 0xee00}}, './file0\x00'})
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r1)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400e080}, 0x4)
r4 = getpid()
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket(0x2, 0xa, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r6)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0)=<r7=>0x0, &(0x7f0000000200)=0x4)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'sit0\x00', r7, 0x8, 0x40, 0x2, 0x6, {{0x2a, 0x4, 0x2, 0x28, 0xa8, 0x66, 0x0, 0x7b, 0x29, 0x0, @multicast1, @rand_addr=0x64010100, {[@lsrr={0x83, 0xf, 0xd2, [@multicast2, @local, @remote]}, @end, @cipso={0x86, 0x48, 0x1, [{0x5, 0x6, "4747c984"}, {0x0, 0xb, "9bda21ecc8810e12c5"}, {0x1, 0xd, "9580a304d9401d6e1c1897"}, {0x0, 0x3, 't'}, {0x5, 0xc, "a7a4b3e147f711886b07"}, {0x5, 0x5, "fa4949"}, {0x7, 0x10, "6034776d90af693eea2d2c2d6ddf"}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x13, 0x1, [{0x1, 0xd, "0e4d3d8783e602e51389f5"}]}, @rr={0x7, 0xb, 0x97, [@private=0xa010101, @rand_addr=0x64010102]}, @end, @rr={0x7, 0x17, 0x6e, [@multicast2, @broadcast, @rand_addr=0x64010100, @broadcast, @broadcast]}]}}}}})
kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, r5, &(0x7f0000000180)={r2, r2, 0x2})

09:02:28 executing program 0:
socketpair(0x2b, 0x5, 0x0, &(0x7f0000000980))

09:02:28 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000440), 0x2c0c3, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:28 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000), 0x8)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8)
connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

09:02:28 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000), 0x8) (async)
connect$bt_sco(r0, &(0x7f0000000000), 0x8)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8)
connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

09:02:28 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000440), 0x2c0c3, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000440), 0x2c0c3, 0x0) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)

09:02:28 executing program 2:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r0, {0xee00, 0xee00}}, './file0\x00'}) (async)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r1)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400e080}, 0x4) (async)
r4 = getpid()
r5 = socket$inet_udplite(0x2, 0x2, 0x88) (async)
r6 = socket(0x2, 0xa, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r6) (async)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0)=<r7=>0x0, &(0x7f0000000200)=0x4)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'sit0\x00', r7, 0x8, 0x40, 0x2, 0x6, {{0x2a, 0x4, 0x2, 0x28, 0xa8, 0x66, 0x0, 0x7b, 0x29, 0x0, @multicast1, @rand_addr=0x64010100, {[@lsrr={0x83, 0xf, 0xd2, [@multicast2, @local, @remote]}, @end, @cipso={0x86, 0x48, 0x1, [{0x5, 0x6, "4747c984"}, {0x0, 0xb, "9bda21ecc8810e12c5"}, {0x1, 0xd, "9580a304d9401d6e1c1897"}, {0x0, 0x3, 't'}, {0x5, 0xc, "a7a4b3e147f711886b07"}, {0x5, 0x5, "fa4949"}, {0x7, 0x10, "6034776d90af693eea2d2c2d6ddf"}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x13, 0x1, [{0x1, 0xd, "0e4d3d8783e602e51389f5"}]}, @rr={0x7, 0xb, 0x97, [@private=0xa010101, @rand_addr=0x64010102]}, @end, @rr={0x7, 0x17, 0x6e, [@multicast2, @broadcast, @rand_addr=0x64010100, @broadcast, @broadcast]}]}}}}})
kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, r5, &(0x7f0000000180)={r2, r2, 0x2})

09:02:28 executing program 1:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)

09:02:28 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000000))
connect$bt_sco(r0, &(0x7f0000000040), 0x8)

09:02:28 executing program 1:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x1, 0x4}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
getpeername$tipc(r1, &(0x7f0000000000), &(0x7f0000000080)=0x10)

09:02:28 executing program 2:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)

09:02:28 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000000)) (async)
connect$bt_sco(r0, &(0x7f0000000040), 0x8)

09:02:28 executing program 2:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x1, 0x4}}, 0x10) (async, rerun: 64)
r1 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64)
getpeername$tipc(r1, &(0x7f0000000000), &(0x7f0000000080)=0x10)

09:02:28 executing program 1:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)

09:02:28 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f00000001c0), 0x8)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000080)=0xfffffffffffffe53)

09:02:28 executing program 2:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)

09:02:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x9, @media='ib\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x2000c004)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x480d0)
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x0, 0x70bd2c, 0x7, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008002}, 0x90)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r1)
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYRES64=r2, @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="12ca7dfa4b70dd3b0598f6a57a5ef7c1df77e20833cf2767ea13544fdf"], 0x34}, 0x1, 0x0, 0x0, 0x404c8d0}, 0x40044)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x880)

09:02:28 executing program 2:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f00000001c0), 0x8)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000080)=0xfffffffffffffe53)

09:02:28 executing program 1:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)

09:02:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x9, @media='ib\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x2000c004) (async)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x480d0) (async)
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x0, 0x70bd2c, 0x7, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008002}, 0x90) (async)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r1)
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYRES64=r2, @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="12ca7dfa4b70dd3b0598f6a57a5ef7c1df77e20833cf2767ea13544fdf"], 0x34}, 0x1, 0x0, 0x0, 0x404c8d0}, 0x40044)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x880)

09:02:28 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair(0x1e, 0x4, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x200000c0)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000000))

09:02:28 executing program 2:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)

09:02:28 executing program 1:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f00000002c0), r0)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x10, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x38}}, @GTPA_VERSION={0x8}]}, 0x40}}, 0x0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x9abd4c6ec52b49d1, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300), 0x220500, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r5, 0x40305828, 0x0)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_I_TEI={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4040800)

09:02:28 executing program 2:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
socketpair(0x1e, 0x4, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x200000c0) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000000))

09:02:28 executing program 1:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)

09:02:28 executing program 2:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f00000002c0), r0) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), 0xffffffffffffffff) (rerun: 64)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x10, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x38}}, @GTPA_VERSION={0x8}]}, 0x40}}, 0x0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x9abd4c6ec52b49d1, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) (async, rerun: 32)
r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) (rerun: 32)
syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) (async)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, 0x0)
r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300), 0x220500, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r5, 0x40305828, 0x0)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_I_TEI={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4040800)

09:02:28 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000000))
connect$bt_sco(r0, &(0x7f0000000040), 0x8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x4)

09:02:28 executing program 1:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)

09:02:28 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000000)) (async)
connect$bt_sco(r0, &(0x7f0000000040), 0x8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x4)

09:02:28 executing program 2:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)

09:02:28 executing program 1:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0)

09:02:28 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:28 executing program 2:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) (async)
bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0)

09:02:29 executing program 1:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)

09:02:29 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

[ 1009.699476][ T5213] Bluetooth: hci4: command 0x041b tx timeout
09:02:29 executing program 0:
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, 0x0, 0x0, <r0=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f00000002c0)={0x48, 0x8, r0, 0x0, 0x8, 0xe3, &(0x7f00000001c0)="8576ab52e7831ef6192ef4e32f96d97f568faf9e99224f8bada616eb63d443c76a022be36a52d43f3373e3c548755d4d97dd97681c949d3106a8023a57c7e51489df144c8ee6a6eced044ce36d909a0cb765bd0e35cb08f1783a9f059a29fc1a8f930da44bbe2f4bb73c6acb7ba2e10b43366cdfa4acb1a4c3f64f66f4435fb348fba7723c1dc09cfe217cc61f57818c1d52135ee305eb8b5df7503868ec8b6308b44f5a549376240826bc63b056eda6002139e07d12dc67b577f376db8f86ef7fafa3e43cbbae1a8828c76fc31871807f03603d41526f0a3f3b40156238a0b3975511", 0x5})
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000100)=""/133, &(0x7f00000000c0)=0x85)

09:02:29 executing program 1:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0)
setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000040), 0x4)

09:02:29 executing program 2:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)

09:02:29 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/8, &(0x7f0000000040)=0x8)

09:02:29 executing program 1:
socketpair(0x2b, 0x6, 0x0, &(0x7f0000000980))

09:02:29 executing program 3:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0)
setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000040), 0x4) (async)
setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000040), 0x4)

09:02:29 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/8, &(0x7f0000000040)=0x8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/8, &(0x7f0000000040)=0x8) (async)

09:02:29 executing program 2:
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, 0x0, 0x0, <r0=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f00000002c0)={0x48, 0x8, r0, 0x0, 0x8, 0xe3, &(0x7f00000001c0)="8576ab52e7831ef6192ef4e32f96d97f568faf9e99224f8bada616eb63d443c76a022be36a52d43f3373e3c548755d4d97dd97681c949d3106a8023a57c7e51489df144c8ee6a6eced044ce36d909a0cb765bd0e35cb08f1783a9f059a29fc1a8f930da44bbe2f4bb73c6acb7ba2e10b43366cdfa4acb1a4c3f64f66f4435fb348fba7723c1dc09cfe217cc61f57818c1d52135ee305eb8b5df7503868ec8b6308b44f5a549376240826bc63b056eda6002139e07d12dc67b577f376db8f86ef7fafa3e43cbbae1a8828c76fc31871807f03603d41526f0a3f3b40156238a0b3975511", 0x5}) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000100)=""/133, &(0x7f00000000c0)=0x85)

09:02:29 executing program 1:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, 0x0, 0x1)

09:02:29 executing program 3:
socketpair(0x2b, 0x7, 0x0, &(0x7f0000000980))

09:02:29 executing program 2:
socketpair(0x2b, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
connect$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e23}}, 0x10)

09:02:29 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f00000000c0)=""/20, &(0x7f0000000100)=0x14)
connect$bt_sco(r0, &(0x7f0000000140), 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000180), r1)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/92, &(0x7f0000000080)=0x5c)

09:02:29 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)

09:02:29 executing program 3:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, 0x0, 0x1)

09:02:29 executing program 2:
socketpair(0x2b, 0x9, 0x0, &(0x7f0000000980))

09:02:29 executing program 3:
socketpair(0x2b, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
connect$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e23}}, 0x10)

09:02:29 executing program 2:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, 0x0, 0x1)

09:02:29 executing program 3:
socketpair(0x2b, 0xa, 0x0, &(0x7f0000000980))

09:02:29 executing program 2:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
connect$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x2, 0x2}}, 0x10)

09:02:29 executing program 3:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)

09:02:29 executing program 2:
socketpair(0x2b, 0xa, 0x0, &(0x7f0000000980))

09:02:29 executing program 3:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
connect$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x2, 0x2}}, 0x10) (async)
connect$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x2, 0x2}}, 0x10)

09:02:29 executing program 2:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048010}, 0x1)

09:02:29 executing program 3:
socketpair(0x2b, 0x10, 0x0, &(0x7f0000000980))

09:02:29 executing program 3:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000001)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000f5c89c00000000000000027fdb9c49e5452cbb6e3699d1c02bd4866234f9caa4dea891fdf3cf7600a194e22aabecd610e7d0e6caab8b951170ba72cf5ef9aba4c40460b08d44a21302af53507549e90640bd0cba31ed", @ANYRES16=r1, @ANYBLOB="200025bd7000ffdbdf25010000000000000009410000001c001800000ce36574683a76657468305f746f5f68737200000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x4000)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x2}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20004081)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc5}, 0x4000)

09:02:29 executing program 2:
socketpair(0x2b, 0x21, 0x0, &(0x7f0000000980))

09:02:29 executing program 3:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048010}, 0x1)

09:02:29 executing program 2:
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async)
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000001)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000f5c89c00000000000000027fdb9c49e5452cbb6e3699d1c02bd4866234f9caa4dea891fdf3cf7600a194e22aabecd610e7d0e6caab8b951170ba72cf5ef9aba4c40460b08d44a21302af53507549e90640bd0cba31ed", @ANYRES16=r1, @ANYBLOB="200025bd7000ffdbdf25010000000000000009410000001c001800000ce36574683a76657468305f746f5f68737200000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x4000)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x2}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20004081) (async)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x2}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20004081)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc5}, 0x4000)

09:02:29 executing program 2:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000001)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000f5c89c00000000000000027fdb9c49e5452cbb6e3699d1c02bd4866234f9caa4dea891fdf3cf7600a194e22aabecd610e7d0e6caab8b951170ba72cf5ef9aba4c40460b08d44a21302af53507549e90640bd0cba31ed", @ANYRES16=r1, @ANYBLOB="200025bd7000ffdbdf25010000000000000009410000001c001800000ce36574683a76657468305f746f5f68737200000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x4000)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x2}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20004081)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc5}, 0x4000)

09:02:29 executing program 3:
socketpair(0x2b, 0xa, 0x0, &(0x7f0000000980))

09:02:29 executing program 3:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048010}, 0x1)

09:02:29 executing program 2:
socketpair(0x2b, 0xa, 0x0, &(0x7f0000000980))

09:02:29 executing program 3:
socketpair(0x2b, 0x2f6, 0x0, &(0x7f0000000980))

09:02:29 executing program 2:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4048010}, 0x1)

09:02:29 executing program 2:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x20, @media='udp\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x40010)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000010})
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/ipc\x00')
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x40081)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)

09:02:29 executing program 3:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x1)

09:02:29 executing program 3:
socketpair(0x2b, 0x300, 0x0, &(0x7f0000000980))

09:02:29 executing program 2:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)

09:02:29 executing program 3:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x20, @media='udp\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x40010)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000010})
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/ipc\x00')
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x40081)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)) (async)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x20, @media='udp\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) (async)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) (async)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) (async)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000010}) (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/ipc\x00') (async)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x40081) (async)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async)

09:02:29 executing program 2:
socketpair(0x2b, 0x500, 0x0, &(0x7f0000000980))

09:02:29 executing program 3:
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)

09:02:29 executing program 2:
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))

09:02:29 executing program 2:
socketpair(0x2b, 0x600, 0x0, &(0x7f0000000980))

09:02:30 executing program 3:
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))

09:02:30 executing program 2:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:30 executing program 0:
socketpair(0x2b, 0x700, 0x0, &(0x7f0000000980))

09:02:30 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f00000000c0)=""/20, &(0x7f0000000100)=0x14) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f00000000c0)=""/20, &(0x7f0000000100)=0x14)
connect$bt_sco(r0, &(0x7f0000000140), 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000180), r1) (async)
syz_genetlink_get_family_id$smc(&(0x7f0000000180), r1)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/92, &(0x7f0000000080)=0x5c)

09:02:30 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async)

09:02:30 executing program 0:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r3}, 0x14}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r3, 0x404, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x3d}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xe}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x32}]}, 0x64}}, 0xcc846)

09:02:30 executing program 2:
socketpair(0x2b, 0x810, 0x0, &(0x7f0000000980))

09:02:30 executing program 2:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:30 executing program 0:
socketpair(0x2b, 0x900, 0x0, &(0x7f0000000980))

09:02:30 executing program 0:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r3}, 0x14}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r3, 0x404, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x3d}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xe}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x32}]}, 0x64}}, 0xcc846)

09:02:30 executing program 2:
socketpair(0x2b, 0xa00, 0x0, &(0x7f0000000980))

09:02:30 executing program 0:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

09:02:30 executing program 2:
socketpair(0x0, 0x0, 0x0, &(0x7f0000000980))

09:02:30 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000050000000000000205000000020000000000000a04000000070000000000000c0100000000000099580c74db4a6ea267b3f04acf3f32d3a351cc5f334d22505091a14b15fa3087bc2247a520802e84dff37d0777fd82503a7ccec5766d90b3afe5f5e681a8d0f635b139822b3270877cc85a869a4a62cfa1b933d9c80e999244332a0e1dec4f7524ca4442bc8c6845f7766d17a4fec595dd48cc661f70aa301d52381a74113ed8564a643f53e685c606fe4cde14"], &(0x7f0000000040)=""/246, 0x3f, 0xf6, 0x0, 0x1}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7b2e, 0x0, 0x1, 0x80000001, '\x00', 0x0, r1, 0x1, 0x0, 0x5}, 0x48)

[ 1010.819221][ T5213] Bluetooth: hci2: command 0x040f tx timeout
09:02:30 executing program 3:
socketpair(0x2b, 0x1008, 0x0, &(0x7f0000000980))

09:02:30 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000050000000000000205000000020000000000000a04000000070000000000000c0100000000000099580c74db4a6ea267b3f04acf3f32d3a351cc5f334d22505091a14b15fa3087bc2247a520802e84dff37d0777fd82503a7ccec5766d90b3afe5f5e681a8d0f635b139822b3270877cc85a869a4a62cfa1b933d9c80e999244332a0e1dec4f7524ca4442bc8c6845f7766d17a4fec595dd48cc661f70aa301d52381a74113ed8564a643f53e685c606fe4cde14"], &(0x7f0000000040)=""/246, 0x3f, 0xf6, 0x0, 0x1}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7b2e, 0x0, 0x1, 0x80000001, '\x00', 0x0, r1, 0x1, 0x0, 0x5}, 0x48)

09:02:30 executing program 3:
socketpair(0x0, 0x0, 0x0, &(0x7f0000000980))
socketpair(0x0, 0x0, 0x0, &(0x7f0000000980)) (async)

09:02:30 executing program 2:
socketpair(0x2b, 0x1f00, 0x0, &(0x7f0000000980))

09:02:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x541b, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000540))
r1 = socket$igmp6(0xa, 0x3, 0x2)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x10042, 0x0)
setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e21, 0x7, @private2, 0x100}, {0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2005}, 0x0, {[0x2880, 0x200, 0x3746, 0x3f, 0x0, 0x2, 0x994, 0x5]}}, 0x5c)

09:02:30 executing program 2:
socketpair(0x2b, 0x2000, 0x0, &(0x7f0000000980))

09:02:30 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x541b, 0x0) (async)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000540))
r1 = socket$igmp6(0xa, 0x3, 0x2)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x10042, 0x0)
setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e21, 0x7, @private2, 0x100}, {0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2005}, 0x0, {[0x2880, 0x200, 0x3746, 0x3f, 0x0, 0x2, 0x994, 0x5]}}, 0x5c)

09:02:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0xf11, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10dc000000000000002501000000000000000b000000000c001473797a3000010000"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x40000c0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000400), 0x4)
r3 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'})
setsockopt$MRT6_TABLE(r2, 0x29, 0xcf, &(0x7f0000000000)=0xff, 0x4)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x76}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4061)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000040), 0x4)
setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000440)={{0xa, 0x4e20, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x6, 0x0}, 0x6}, 0xffffffffffffffff, {[0x40, 0x1, 0x0, 0x1, 0x6, 0x4, 0x6, 0x7f]}}, 0x5c)

09:02:30 executing program 3:
socketpair(0x2b, 0x3f00, 0x0, &(0x7f0000000980))

09:02:30 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x40a01, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000280)={<r1=>0x0})
ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000300)={r1, 0x28})
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x106080, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000000000000c"], 0x30}}, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000380)={r1, &(0x7f0000000340)=""/11})
sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="08002cbd7000fcdbdf250000140018000013086574683a67656e6576653100"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r6, 0x11, 0x1, &(0x7f0000000000)=""/240, &(0x7f0000000100)=0xf0)
getsockopt$bt_sco_SCO_OPTIONS(r5, 0x11, 0x1, 0x0, &(0x7f0000000540))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:30 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed}, 0x8)

09:02:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0xf11, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10dc000000000000002501000000000000000b000000000c001473797a3000010000"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x40000c0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000400), 0x4)
r3 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'})
setsockopt$MRT6_TABLE(r2, 0x29, 0xcf, &(0x7f0000000000)=0xff, 0x4)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x76}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4061)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000040), 0x4)
setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000440)={{0xa, 0x4e20, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x6, 0x0}, 0x6}, 0xffffffffffffffff, {[0x40, 0x1, 0x0, 0x1, 0x6, 0x4, 0x6, 0x7f]}}, 0x5c)

09:02:30 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x40a01, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000280)={<r1=>0x0})
ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000300)={r1, 0x28})
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x106080, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000000000000c"], 0x30}}, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000380)={r1, &(0x7f0000000340)=""/11})
sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="08002cbd7000fcdbdf250000140018000013086574683a67656e6576653100"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r6, 0x11, 0x1, &(0x7f0000000000)=""/240, &(0x7f0000000100)=0xf0)
getsockopt$bt_sco_SCO_OPTIONS(r5, 0x11, 0x1, 0x0, &(0x7f0000000540))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:30 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x40a01, 0x0) (async)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000280)={<r1=>0x0})
ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000300)={r1, 0x28}) (async)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x106080, 0x0)
accept4$tipc(r2, 0x0, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000000000000c"], 0x30}}, 0x0) (async)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000380)={r1, &(0x7f0000000340)=""/11})
sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="08002cbd7000fcdbdf250000140018000013086574683a67656e6576653100"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r6, 0x11, 0x1, &(0x7f0000000000)=""/240, &(0x7f0000000100)=0xf0)
getsockopt$bt_sco_SCO_OPTIONS(r5, 0x11, 0x1, 0x0, &(0x7f0000000540))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0xf11, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) (async)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0xf11, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10dc000000000000002501000000000000000b000000000c001473797a3000010000"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x40000c0)
socket$igmp6(0xa, 0x3, 0x2) (async)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000400), 0x4)
r3 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'})
setsockopt$MRT6_TABLE(r2, 0x29, 0xcf, &(0x7f0000000000)=0xff, 0x4)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x76}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4061)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000040), 0x4)
setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000440)={{0xa, 0x4e20, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x6, 0x0}, 0x6}, 0xffffffffffffffff, {[0x40, 0x1, 0x0, 0x1, 0x6, 0x4, 0x6, 0x7f]}}, 0x5c) (async)
setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000440)={{0xa, 0x4e20, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x6, 0x0}, 0x6}, 0xffffffffffffffff, {[0x40, 0x1, 0x0, 0x1, 0x6, 0x4, 0x6, 0x7f]}}, 0x5c)

09:02:30 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
r1 = socket(0x25, 0x1, 0x0)
bind$bt_hci(r1, 0x0, 0x925d3e900a9b2e35)
getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/60, &(0x7f0000000040)=0x3c)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'})

09:02:30 executing program 2:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x404c850}, 0x4)

09:02:30 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
r1 = socket(0x25, 0x1, 0x0)
bind$bt_hci(r1, 0x0, 0x925d3e900a9b2e35)
getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/60, &(0x7f0000000040)=0x3c)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'})

09:02:30 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)
r1 = socket(0x25, 0x1, 0x0)
bind$bt_hci(r1, 0x0, 0x925d3e900a9b2e35)
getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/60, &(0x7f0000000040)=0x3c) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) (rerun: 64)

09:02:31 executing program 1:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x404c850}, 0x4)

09:02:31 executing program 1:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', <r1=>0x0, 0x1, 0x10, 0xfffffffe, 0x7, {{0x9, 0x4, 0x0, 0x7, 0x24, 0x64, 0x0, 0x3, 0x4, 0x0, @broadcast, @rand_addr=0x64010100, {[@generic={0x83, 0xf, "e040ee2592fe130b2533387f99"}]}}}}})
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x5, 0x0, r0, 0x2, '\x00', r1, r2, 0x0, 0x4, 0x2}, 0x48)
clock_gettime(0x3, &(0x7f0000000000))
rt_sigsuspend(&(0x7f0000000080), 0x8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:31 executing program 0:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000))

09:02:31 executing program 0:
socketpair(0x2b, 0x4000, 0x0, &(0x7f0000000980))

09:02:31 executing program 0:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000))

09:02:31 executing program 0:
socketpair(0x2b, 0xf602, 0x0, &(0x7f0000000980))

09:02:31 executing program 0:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x4}}}, 0x24}}, 0x0)
connect$tipc(r0, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}, 0x4}}, 0x10)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
accept4$tipc(r3, &(0x7f0000000340)=@name, &(0x7f0000000380)=0x10, 0x80000)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000000000000c"], 0x30}}, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000042}, 0x40000)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r1)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r6, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c0}, 0xc010)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x8010)

[ 1011.770573][ T5213] Bluetooth: hci4: command 0x041b tx timeout
09:02:31 executing program 0:
socketpair(0x2b, 0x200000, 0x0, &(0x7f0000000980))

09:02:31 executing program 3:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x4}}}, 0x24}}, 0x0) (async)
connect$tipc(r0, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}, 0x4}}, 0x10)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
accept4$tipc(r3, &(0x7f0000000340)=@name, &(0x7f0000000380)=0x10, 0x80000) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) (async, rerun: 32)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000000000000c"], 0x30}}, 0x0) (async)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000042}, 0x40000) (async)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r1)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r6, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c0}, 0xc010)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x8010)

09:02:31 executing program 0:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

09:02:31 executing program 3:
socketpair(0x2b, 0x1000000, 0x0, &(0x7f0000000980))

09:02:31 executing program 3:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000140), r1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x604, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0xfe}}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x88c0)

09:02:31 executing program 3:
socketpair(0x2b, 0x2000000, 0x0, &(0x7f0000000980))

09:02:31 executing program 3:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000140), r1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x604, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0xfe}}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x88c0)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$smc(&(0x7f0000000140), r1) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x604, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0xfe}}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x88c0) (async)

09:02:31 executing program 3:
socketpair(0x2b, 0x3000000, 0x0, &(0x7f0000000980))

09:02:31 executing program 3:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1000000000000}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6a}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48841}, 0x8004)

09:02:31 executing program 3:
socketpair(0x2b, 0x4000000, 0x0, &(0x7f0000000980))

09:02:31 executing program 3:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1000000000000}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6a}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48841}, 0x8004)

09:02:31 executing program 3:
socketpair(0x2b, 0x5000000, 0x0, &(0x7f0000000980))

09:02:31 executing program 3:
r0 = socket(0x9, 0xa, 0x7)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x1, [0x200, 0xd1], 0x1}, 0x10)

09:02:31 executing program 3:
socketpair(0x2b, 0x6000000, 0x0, &(0x7f0000000980))

09:02:31 executing program 3:
r0 = socket(0x9, 0xa, 0x7)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x1, [0x200, 0xd1], 0x1}, 0x10)

09:02:31 executing program 2:
socketpair(0x2b, 0x7000000, 0x0, &(0x7f0000000980))

09:02:31 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0x0, &(0x7f0000000040))
connect$bt_sco(r0, &(0x7f0000000000), 0x8)

09:02:31 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080))
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000))
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))

09:02:31 executing program 2:
socketpair(0x2b, 0x8100000, 0x0, &(0x7f0000000980))

09:02:31 executing program 2:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080))
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000))
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async)

09:02:31 executing program 2:
socketpair(0x2b, 0x9000000, 0x0, &(0x7f0000000980))

09:02:31 executing program 2:
prctl$PR_SET_KEEPCAPS(0x8, 0x1)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))

09:02:31 executing program 2:
socketpair(0x2b, 0xa000000, 0x0, &(0x7f0000000980))

09:02:32 executing program 2:
prctl$PR_SET_KEEPCAPS(0x8, 0x1)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))
prctl$PR_SET_KEEPCAPS(0x8, 0x1) (async)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)) (async)

09:02:32 executing program 2:
socketpair(0x2b, 0x10000000, 0x0, &(0x7f0000000980))

09:02:32 executing program 2:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0xb}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x100, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8045}, 0x8000005)

09:02:32 executing program 1:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0xb}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x100, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8045}, 0x8000005) (async)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x100, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8045}, 0x8000005)

09:02:32 executing program 2:
socketpair(0x2b, 0x1f000000, 0x0, &(0x7f0000000980))

09:02:32 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', <r1=>0x0, 0x1, 0x10, 0xfffffffe, 0x7, {{0x9, 0x4, 0x0, 0x7, 0x24, 0x64, 0x0, 0x3, 0x4, 0x0, @broadcast, @rand_addr=0x64010100, {[@generic={0x83, 0xf, "e040ee2592fe130b2533387f99"}]}}}}})
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x5, 0x0, r0, 0x2, '\x00', r1, r2, 0x0, 0x4, 0x2}, 0x48)
clock_gettime(0x3, &(0x7f0000000000))
rt_sigsuspend(&(0x7f0000000080), 0x8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x1, 0x10, 0xfffffffe, 0x7, {{0x9, 0x4, 0x0, 0x7, 0x24, 0x64, 0x0, 0x3, 0x4, 0x0, @broadcast, @rand_addr=0x64010100, {[@generic={0x83, 0xf, "e040ee2592fe130b2533387f99"}]}}}}}) (async)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) (async)
ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, 0x0) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x5, 0x0, r0, 0x2, '\x00', r1, r2, 0x0, 0x4, 0x2}, 0x48) (async)
clock_gettime(0x3, &(0x7f0000000000)) (async)
rt_sigsuspend(&(0x7f0000000080), 0x8) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)

09:02:32 executing program 1:
socketpair(0x2b, 0x20000000, 0x0, &(0x7f0000000980))

09:02:32 executing program 1:
syz_io_uring_setup(0x2c6c, &(0x7f0000000000)={0x0, 0xb85a, 0x200, 0x0, 0x1cc}, &(0x7f0000000080), &(0x7f00000000c0)=<r0=>0x0)
syz_io_uring_submit(0x0, r0, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5c, 0x0, 0x5, 0x0, &(0x7f0000000100)="423e07149f7921a06138d715ad19fb8d757908fae4557b62c3d6676a6359d75f8506858cdfd7fc55785183a13d23f26bf47cd01a1fcc25945db00f2993415d8382241ff97925d12554f1405d234af782c64e7ce7a2c76131b0fcaeb5897cf202a8ff61f40619ee3b4e08ac34fba8ac1f0da2041b0f7d14131e22de46d584e496bb41938ea7a6b03485f0f54f1418429ed9d05a03561f8e39d8f1a8ab65da6fc480fc57c9f7256cde3e35b219835416cc1c9832759e702d61a4bbfdb6eee64b38c58a7aa026009735e2b202c51178574de44b5b64407ad1f4c78d6aaf6911f8f97aa40b6c37435b5936"})
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))

09:02:32 executing program 1:
socketpair(0x2b, 0x21000000, 0x0, &(0x7f0000000980))

09:02:32 executing program 1:
syz_io_uring_setup(0x2c6c, &(0x7f0000000000)={0x0, 0xb85a, 0x200, 0x0, 0x1cc}, &(0x7f0000000080), &(0x7f00000000c0)=<r0=>0x0)
syz_io_uring_submit(0x0, r0, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5c, 0x0, 0x5, 0x0, &(0x7f0000000100)="423e07149f7921a06138d715ad19fb8d757908fae4557b62c3d6676a6359d75f8506858cdfd7fc55785183a13d23f26bf47cd01a1fcc25945db00f2993415d8382241ff97925d12554f1405d234af782c64e7ce7a2c76131b0fcaeb5897cf202a8ff61f40619ee3b4e08ac34fba8ac1f0da2041b0f7d14131e22de46d584e496bb41938ea7a6b03485f0f54f1418429ed9d05a03561f8e39d8f1a8ab65da6fc480fc57c9f7256cde3e35b219835416cc1c9832759e702d61a4bbfdb6eee64b38c58a7aa026009735e2b202c51178574de44b5b64407ad1f4c78d6aaf6911f8f97aa40b6c37435b5936"}) (async)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))

09:02:32 executing program 2:
socketpair(0x2b, 0x3f000000, 0x0, &(0x7f0000000980))

09:02:32 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000300)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x6, 0x1, 0x2, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000380)={r1})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)

09:02:32 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40800)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8b}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan0\x00'}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8000}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004090)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0xb08, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x91}, 0x840)

09:02:32 executing program 0:
socketpair(0x2b, 0x40000000, 0x0, &(0x7f0000000980))

09:02:32 executing program 2:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680), 0x3a)

09:02:32 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40800)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8b}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan0\x00'}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8000}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004090)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0xb08, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x91}, 0x840)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40800) (async)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8b}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan0\x00'}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8000}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004090) (async)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0xb08, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x91}, 0x840) (async)

09:02:32 executing program 0:
socketpair(0x2b, 0x8cffffff, 0x0, &(0x7f0000000980))

09:02:32 executing program 2:
r0 = socket(0x1a, 0x800, 0x4f0)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4055)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))

09:02:32 executing program 2:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680), 0x3a)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
connect$bt_sco(r0, &(0x7f0000000680), 0x3a) (async)

09:02:32 executing program 0:
r0 = socket(0x1a, 0x800, 0x4f0)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4055) (async)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))

09:02:32 executing program 2:
socketpair(0x2b, 0xf6020000, 0x0, &(0x7f0000000980))

09:02:32 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="000000f2a200eeff000000000000"], 0x14}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', <r4=>0x0, 0x29, 0x0, 0x1, 0x80000001, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x8000, 0x1, 0x2000, 0x6}})
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000200)={<r6=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, &(0x7f0000000240)={r6, 0x1})
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={<r7=>0x0})
ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000580))
r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x1000c0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r8, 0xc0086420, &(0x7f0000000280))
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, &(0x7f0000000080)={r7})
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000140)={r7, 0x3})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x3, 0x5, 0x5, 0x2})
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r9, &(0x7f0000000680)={0x1f, @fixed}, 0x8)

09:02:32 executing program 2:
socketpair(0x2b, 0x6, 0x0, &(0x7f0000000980))
socket$nl_generic(0x10, 0x3, 0x10)

09:02:32 executing program 2:
socketpair(0x2b, 0xfeffffff, 0x0, &(0x7f0000000980))

09:02:32 executing program 2:
socketpair(0x2b, 0x6, 0x0, &(0x7f0000000980)) (async)
socketpair(0x2b, 0x6, 0x0, &(0x7f0000000980))
socket$nl_generic(0x10, 0x3, 0x10)

[ 1012.889289][ T5213] Bluetooth: hci2: command 0x040f tx timeout
09:02:32 executing program 2:
socketpair(0x2b, 0xffffff8c, 0x0, &(0x7f0000000980))

09:02:32 executing program 3:
socketpair(0xb, 0x1, 0x9, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x1}, 0x2}}, 0x10)

09:02:32 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0x0, &(0x7f0000000040)) (async, rerun: 64)
connect$bt_sco(r0, &(0x7f0000000000), 0x8) (rerun: 64)

09:02:32 executing program 3:
socketpair(0x2b, 0xfffffffe, 0x0, &(0x7f0000000980))

09:02:32 executing program 3:
socketpair(0xb, 0x1, 0x9, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x1}, 0x2}}, 0x10)

09:02:32 executing program 3:
socketpair(0x2b, 0x2000000000, 0x0, &(0x7f0000000980))

09:02:32 executing program 3:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000980))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r2, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x2, @link='broadcast-link\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20040011}, 0x20008004)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2a000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)

09:02:32 executing program 3:
socketpair(0x2b, 0x2100000000, 0x0, &(0x7f0000000980))

09:02:32 executing program 3:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000980))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r2, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x2, @link='broadcast-link\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20040011}, 0x20008004)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2a000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000980)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) (async)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r2, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x2, @link='broadcast-link\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20040011}, 0x20008004) (async)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2a000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) (async)

09:02:32 executing program 3:
socketpair(0x2b, 0x1000000000000, 0x0, &(0x7f0000000980))

09:02:32 executing program 3:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c091}, 0x20000081)

09:02:32 executing program 3:
socketpair(0x2b, 0x20000000000000, 0x0, &(0x7f0000000980))

09:02:32 executing program 3:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c091}, 0x20000081) (async)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c091}, 0x20000081)

09:02:32 executing program 3:
socketpair(0x2b, 0x100000000000000, 0x0, &(0x7f0000000980))

[ 1013.424606][ T5209] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1013.431330][ T5209] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1013.435016][ T5209] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1013.438667][ T5209] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1013.442438][ T5209] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1013.445505][ T5209] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
09:02:33 executing program 1:
socketpair(0x2b, 0x200000000000000, 0x0, &(0x7f0000000980))

09:02:33 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000300)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x6, 0x1, 0x2, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000380)={r1})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000300)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x6, 0x1, 0x2}) (async)
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000380)={r1}) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async)

[ 1013.602950][T22585] chnl_net:caif_netlink_parms(): no params data found
09:02:33 executing program 0:
socketpair(0x2b, 0x300000000000000, 0x0, &(0x7f0000000980))

09:02:33 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r1 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="000000f2a200eeff000000000000"], 0x14}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0) (async)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', <r4=>0x0, 0x29, 0x0, 0x1, 0x80000001, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x8000, 0x1, 0x2000, 0x6}})
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000200)={<r6=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, &(0x7f0000000240)={r6, 0x1})
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={<r7=>0x0})
ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000580))
openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x1000c0, 0x0) (async)
r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x1000c0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r8, 0xc0086420, &(0x7f0000000280)) (async)
ioctl$DRM_IOCTL_ADD_CTX(r8, 0xc0086420, &(0x7f0000000280))
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, &(0x7f0000000080)={r7})
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000140)={r7, 0x3})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x3, 0x5, 0x5, 0x2})
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r9, &(0x7f0000000680)={0x1f, @fixed}, 0x8)

09:02:33 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

[ 1013.674461][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
09:02:33 executing program 0:
socketpair(0x2b, 0x400000000000000, 0x0, &(0x7f0000000980))

09:02:33 executing program 0:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

09:02:33 executing program 0:
socketpair(0x2b, 0x500000000000000, 0x0, &(0x7f0000000980))

[ 1013.732876][T22585] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1013.735711][T22585] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1013.738480][T22585] bridge_slave_0: entered allmulticast mode
[ 1013.742457][T22585] bridge_slave_0: entered promiscuous mode
09:02:33 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/77, &(0x7f0000000080)=0x4d)

[ 1013.750848][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1013.758739][T22585] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1013.762351][T22585] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1013.765083][T22585] bridge_slave_1: entered allmulticast mode
[ 1013.768258][T22585] bridge_slave_1: entered promiscuous mode
[ 1013.814599][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1013.822660][T22585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1013.828454][T22585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1013.849280][ T5209] Bluetooth: hci4: command 0x041b tx timeout
09:02:33 executing program 2:
socketpair(0x2b, 0x600000000000000, 0x0, &(0x7f0000000980))

[ 1013.873248][T22585] team0: Port device team_slave_0 added
[ 1013.877321][T22585] team0: Port device team_slave_1 added
09:02:33 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x5, 0x0, 0x0, <r1=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, r1, 0x0, 0x0, 0x0, 0x9, 0x17b884, 0x8142c})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x2})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:33 executing program 2:
socketpair(0x2b, 0x700000000000000, 0x0, &(0x7f0000000980))

[ 1013.919924][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1013.926000][T22585] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1013.929310][T22585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
09:02:33 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x5, 0x0, 0x0, <r1=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, r1, 0x0, 0x0, 0x0, 0x9, 0x17b884, 0x8142c})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x2}) (async)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, 0x0, &(0x7f0000000540))

[ 1013.940224][T22585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1013.946202][T22585] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1013.948872][T22585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1013.958324][T22585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
09:02:33 executing program 2:
socketpair(0x2b, 0x810000000000000, 0x0, &(0x7f0000000980))

09:02:33 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

[ 1014.028369][T22585] hsr_slave_0: entered promiscuous mode
[ 1014.031236][T22585] hsr_slave_1: entered promiscuous mode
[ 1014.034458][T22585] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1014.037465][T22585] Cannot create hsr debugfs directory
[ 1014.143025][   T12] bridge_slave_1: left allmulticast mode
[ 1014.145641][   T12] bridge_slave_1: left promiscuous mode
[ 1014.148074][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1014.153296][   T12] bridge_slave_0: left allmulticast mode
[ 1014.155305][   T12] bridge_slave_0: left promiscuous mode
[ 1014.157295][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1014.274968][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1014.283136][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1014.292886][   T12] bond0 (unregistering): Released all slaves
09:02:34 executing program 1:
socketpair(0x2b, 0x900000000000000, 0x0, &(0x7f0000000980))

09:02:34 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180))
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed}, 0x8)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4200, 0x0)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, r2, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xdf}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8993, &(0x7f0000000900)={'batadv_slave_1\x00'})
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xf980674df3d21811}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000040)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r4)

09:02:34 executing program 0:
socketpair(0x2b, 0xa00000000000000, 0x0, &(0x7f0000000980))

09:02:34 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/77, &(0x7f0000000080)=0x4d)

[ 1014.686766][   T12] hsr_slave_0: left promiscuous mode
[ 1014.690701][   T12] hsr_slave_1: left promiscuous mode
[ 1014.694235][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1014.697173][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1014.705249][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1014.707994][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1014.718056][   T12] veth1_macvtap: left promiscuous mode
[ 1014.721599][   T12] veth0_macvtap: left promiscuous mode
[ 1014.724409][   T12] veth1_vlan: left promiscuous mode
[ 1014.727045][   T12] veth0_vlan: left promiscuous mode
09:02:34 executing program 2:
socketpair(0x2b, 0x1000000000000000, 0x0, &(0x7f0000000980))

09:02:34 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

[ 1014.889344][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 1014.904538][   T12] team0 (unregistering): Port device team_slave_0 removed
[ 1015.265142][T22585] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1015.270136][T22585] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1015.274975][T22585] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1015.281276][T22585] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1015.334520][T22585] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1015.351072][T22585] 8021q: adding VLAN 0 to HW filter on device team0
[ 1015.357817][ T4937] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1015.360703][ T4937] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1015.372779][T21242] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1015.376177][T21242] bridge0: port 2(bridge_slave_1) entered forwarding state
09:02:35 executing program 1:
socketpair(0x2b, 0x1f00000000000000, 0x0, &(0x7f0000000980))

[ 1015.408186][T22585] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1015.413806][T22585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
09:02:35 executing program 1:
socketpair(0x2b, 0x3f00000000000000, 0x0, &(0x7f0000000980))

09:02:35 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180))
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed}, 0x8)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4200, 0x0)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1)
socket$l2tp6(0xa, 0x2, 0x73) (async)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, r2, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xdf}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, r2, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xdf}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8993, &(0x7f0000000900)={'batadv_slave_1\x00'})
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xf980674df3d21811}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000040)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r4)

09:02:35 executing program 0:
socketpair(0x2b, 0x4000000000000000, 0x0, &(0x7f0000000980))

[ 1015.529646][ T5209] Bluetooth: hci1: command tx timeout
09:02:35 executing program 0:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x1})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000380)={0x6})
syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

[ 1015.550177][T22585] 8021q: adding VLAN 0 to HW filter on device batadv0
09:02:35 executing program 0:
socketpair(0x2b, 0x8cffffff00000000, 0x0, &(0x7f0000000980))

09:02:35 executing program 0:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64)
r1 = epoll_create(0x1f) (rerun: 64)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x1}) (async)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000380)={0x6}) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) (async, rerun: 64)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64)

[ 1015.582019][T22585] veth0_vlan: entered promiscuous mode
09:02:35 executing program 1:
socketpair(0x2b, 0xf602000000000000, 0x0, &(0x7f0000000980))

[ 1015.596055][T22585] veth1_vlan: entered promiscuous mode
09:02:35 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = getpid()
syz_open_procfs$namespace(r1, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/net\x00')
connect$bt_sco(r0, &(0x7f0000000680), 0x8)

[ 1015.627579][T22585] veth0_macvtap: entered promiscuous mode
09:02:35 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/60, &(0x7f0000000040)=0x3c)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

[ 1015.642098][T22585] veth1_macvtap: entered promiscuous mode
09:02:35 executing program 1:
socketpair(0x2b, 0xfeffffff00000000, 0x0, &(0x7f0000000980))

[ 1015.660669][T22585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1015.665504][T22585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1015.671733][T22585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1015.675766][T22585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1015.681272][T22585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1015.685412][T22585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
09:02:35 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/60, &(0x7f0000000040)=0x3c)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/60, &(0x7f0000000040)=0x3c) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)

[ 1015.695465][T22585] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1015.705591][T22585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1015.712345][T22585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1015.716058][T22585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1015.723433][T22585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1015.727134][T22585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
09:02:35 executing program 1:
socketpair(0x2b, 0xffffffff00000000, 0x0, &(0x7f0000000980))

[ 1015.731640][T22585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1015.736496][T22585] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1015.742676][T22585] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1015.745851][T22585] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1015.748969][T22585] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
09:02:35 executing program 2:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = socket(0x25, 0x1, 0x0)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
r1 = socket(0x1e, 0x1, 0x8)
bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)

[ 1015.753884][T22585] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
09:02:35 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)

09:02:35 executing program 2:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))

09:02:35 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r0 = socket(0x25, 0x1, 0x0)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
r1 = socket(0x1e, 0x1, 0x8)
bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)

[ 1015.819454][ T4921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1015.827180][ T4921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:02:35 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) (async)

[ 1015.846334][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1015.850313][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:02:35 executing program 1:
socketpair(0x2b, 0x0, 0x2, &(0x7f0000000980))

09:02:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400600}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
socketpair(0x23, 0x0, 0x40000, &(0x7f0000000000))

09:02:35 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x80a00, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000480)={0x2000})
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000500))
write$bt_hci(r1, &(0x7f00000004c0)={0x1, @disconnect={{0x406, 0x3}, {0xc8, 0x3}}}, 0x7)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[{}, {}], &(0x7f0000000140)=[<r4=>0x0, 0x0, <r5=>0x0], &(0x7f0000000180)=[0x0], 0x2, 0x3, 0x3})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000240)={0x316859f1, r5, 0x0, 0x8e8e8e8e})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, <r6=>0x0, 0x0], &(0x7f0000000340)=[0x0], 0x4, 0x5, 0x4, 0x1})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f00000003c0)={0x1, r4, r6})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000400)={<r7=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000440)={r7, 0x1})

09:02:35 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x2b2000, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0x541b, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0x0, &(0x7f0000000040)=0x47)

09:02:35 executing program 2:
socketpair(0x2b, 0x0, 0x3, &(0x7f0000000980))

09:02:35 executing program 3:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x80a00, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000480)={0x2000}) (async)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) (async)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r3 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000500)) (async)
write$bt_hci(r1, &(0x7f00000004c0)={0x1, @disconnect={{0x406, 0x3}, {0xc8, 0x3}}}, 0x7)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[{}, {}], &(0x7f0000000140)=[<r4=>0x0, 0x0, <r5=>0x0], &(0x7f0000000180)=[0x0], 0x2, 0x3, 0x3})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000240)={0x316859f1, r5, 0x0, 0x8e8e8e8e})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, <r6=>0x0, 0x0], &(0x7f0000000340)=[0x0], 0x4, 0x5, 0x4, 0x1})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f00000003c0)={0x1, r4, r6})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000400)={<r7=>0x0}) (rerun: 32)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000440)={r7, 0x1})

09:02:35 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400600}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400600}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
socketpair(0x23, 0x0, 0x40000, &(0x7f0000000000))

[ 1015.929351][ T5209] Bluetooth: hci4: command 0x041b tx timeout
09:02:35 executing program 2:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x2b2000, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0x541b, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0x0, &(0x7f0000000040)=0x47) (async)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0x0, &(0x7f0000000040)=0x47)

09:02:35 executing program 3:
socketpair(0x2b, 0x0, 0x4, &(0x7f0000000980))

09:02:35 executing program 2:
r0 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@private, @in=@broadcast}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000000080)=0xe8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0))
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8)

09:02:35 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
connect$bt_sco(r1, &(0x7f0000000040), 0x8)

09:02:35 executing program 1:
socketpair(0x2b, 0x0, 0x5, &(0x7f0000000980))

09:02:35 executing program 1:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r3, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xfa}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100000001}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x16}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004801}, 0x810)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r4=>0x0})
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf250200000008000800020000000800020000000000080008000400000008000100", @ANYRES32=r4, @ANYBLOB="fc54b6b6d9a483ed6446c73bd1da64963208ddcab561a60b81613c800a1bc45f09"], 0x34}, 0x1, 0x0, 0x0, 0x200000d0}, 0x84)
connect$tipc(r0, &(0x7f0000000380)=@name={0x1e, 0x2, 0x1, {{0x41, 0x4}}}, 0x10)

09:02:35 executing program 3:
socketpair(0x2b, 0x0, 0x6, &(0x7f0000000980))

09:02:35 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async, rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'}) (rerun: 32)
connect$bt_sco(r1, &(0x7f0000000040), 0x8)

09:02:35 executing program 3:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r3, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xfa}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100000001}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x16}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004801}, 0x810)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r4=>0x0})
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf250200000008000800020000000800020000000000080008000400000008000100", @ANYRES32=r4, @ANYBLOB="fc54b6b6d9a483ed6446c73bd1da64963208ddcab561a60b81613c800a1bc45f09"], 0x34}, 0x1, 0x0, 0x0, 0x200000d0}, 0x84)
connect$tipc(r0, &(0x7f0000000380)=@name={0x1e, 0x2, 0x1, {{0x41, 0x4}}}, 0x10)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r3, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xfa}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100000001}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x16}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004801}, 0x810) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) (async)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf250200000008000800020000000800020000000000080008000400000008000100", @ANYRES32=r4, @ANYBLOB="fc54b6b6d9a483ed6446c73bd1da64963208ddcab561a60b81613c800a1bc45f09"], 0x34}, 0x1, 0x0, 0x0, 0x200000d0}, 0x84) (async)
connect$tipc(r0, &(0x7f0000000380)=@name={0x1e, 0x2, 0x1, {{0x41, 0x4}}}, 0x10) (async)

09:02:35 executing program 1:
socketpair(0x2b, 0x0, 0x7, &(0x7f0000000980))

09:02:35 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000000))

09:02:35 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x200, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400}, {0xa, 0x4e22, 0x7b7, @private1, 0x1}, 0x1, {[0x80, 0x2, 0x3bc353b0, 0x2000, 0x1, 0xea0f, 0x1, 0x7fff]}}, 0x5c)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x23, 0x0, 0x8000080, &(0x7f0000000980))

09:02:35 executing program 3:
socketpair(0x2b, 0x0, 0x9, &(0x7f0000000980))

09:02:35 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000000))

09:02:35 executing program 1:
socketpair(0x2b, 0x0, 0xa, &(0x7f0000000980))

09:02:36 executing program 0:
socketpair(0x2b, 0x0, 0x10, &(0x7f0000000980))

09:02:36 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:36 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x200, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400}, {0xa, 0x4e22, 0x7b7, @private1, 0x1}, 0x1, {[0x80, 0x2, 0x3bc353b0, 0x2000, 0x1, 0xea0f, 0x1, 0x7fff]}}, 0x5c) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair(0x23, 0x0, 0x8000080, &(0x7f0000000980))

09:02:36 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = getpid()
syz_open_procfs$namespace(r1, 0x0) (async)
syz_open_procfs$namespace(r1, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/net\x00')
connect$bt_sco(r0, &(0x7f0000000680), 0x8)

09:02:36 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:36 executing program 0:
socketpair(0x2b, 0x0, 0x21, &(0x7f0000000980))

09:02:36 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000000))

09:02:36 executing program 0:
socketpair(0x2, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2}, 0x14}}, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x3c}}, 0x800)

09:02:36 executing program 1:
socketpair(0x2b, 0x0, 0x2f6, &(0x7f0000000980))

09:02:36 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000000))

09:02:36 executing program 0:
socketpair(0x2b, 0x0, 0x300, &(0x7f0000000980))

09:02:36 executing program 1:
socketpair(0x2, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2}, 0x14}}, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x3c}}, 0x800)

09:02:36 executing program 0:
r0 = gettid()
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_tgsigqueueinfo(r1, r0, 0x0, &(0x7f0000000180))
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x4, 0x3, {<r2=>0x0}, {0xee00}, 0x2, 0xe})
r3 = gettid()
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x60}, 0x0)
r5 = epoll_create1(0x0)
epoll_pwait(r5, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000240)={r5, r6, 0x5})
r7 = epoll_create1(0x0)
epoll_wait(r7, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x5, 0xfffffffc)
r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x642380, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r8, &(0x7f00000000c0))
ioctl$DRM_IOCTL_MODE_GET_LEASE(r8, 0xc01064c8, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r9)
r10 = socket$inet(0x2, 0x2, 0x6)
r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r12 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x10b380, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r11, 0x3ba0, &(0x7f0000000240)={0x48, 0x8, r12, 0x0, 0x0, 0x0, 0x0, 0x0})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x1})
r13 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r13, 0x89f3, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @remote, 0x80, 0x0, 0xfffff40b}})
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r12, 0x80, &(0x7f0000000400)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x0, 0x0, 0x1})
epoll_create(0x2)
kcmp$KCMP_EPOLL_TFD(r0, r3, 0x7, r10, &(0x7f0000000000)={r12, r12, 0x2})
r14 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r14, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:36 executing program 1:
socketpair(0x2b, 0x0, 0x500, &(0x7f0000000980))

09:02:36 executing program 1:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))
syz_io_uring_setup(0x7470, &(0x7f0000000000)={0x0, 0xb410, 0x1403, 0x0, 0x28a}, &(0x7f0000000080), &(0x7f0000000280)=<r0=>0x0)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x6943, &(0x7f00000002c0)={0x0, 0xf538, 0x2, 0x0, 0x1a1}, &(0x7f0000000200), &(0x7f00000000c0))
r2 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
syz_io_uring_submit(0x0, r0, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x60, 0x0, r1, 0x0, &(0x7f0000000100)='./file0\x00', 0x9, 0x2240, 0x23456})

09:02:36 executing program 1:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)) (async, rerun: 64)
syz_io_uring_setup(0x7470, &(0x7f0000000000)={0x0, 0xb410, 0x1403, 0x0, 0x28a}, &(0x7f0000000080), &(0x7f0000000280)=<r0=>0x0) (async, rerun: 64)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x6943, &(0x7f00000002c0)={0x0, 0xf538, 0x2, 0x0, 0x1a1}, &(0x7f0000000200), &(0x7f00000000c0)) (async)
r2 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) (async)
syz_io_uring_submit(0x0, r0, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x60, 0x0, r1, 0x0, &(0x7f0000000100)='./file0\x00', 0x9, 0x2240, 0x23456})

09:02:36 executing program 1:
socketpair(0x2b, 0x0, 0x600, &(0x7f0000000980))

09:02:36 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8970, &(0x7f0000000900)={'batadv_slave_1\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r1)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf2503810000000000000000000008001700", @ANYRES32, @ANYBLOB="1400080076657468305f746f5f6873720000000006001a004e200000"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r2, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x48c80}, 0x4004040)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))

[ 1016.817763][T22835] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'.
09:02:36 executing program 2:
r0 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@private, @in=@broadcast}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000000080)=0xe8) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0))
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async)
connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8)

09:02:36 executing program 1:
socketpair(0x2b, 0x0, 0x700, &(0x7f0000000980))

09:02:36 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8970, &(0x7f0000000900)={'batadv_slave_1\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r1)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf2503810000000000000000000008001700", @ANYRES32, @ANYBLOB="1400080076657468305f746f5f6873720000000006001a004e200000"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r2, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x48c80}, 0x4004040) (async, rerun: 64)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)) (rerun: 64)

[ 1016.862421][T22844] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'.
09:02:36 executing program 1:
socketpair(0x2b, 0x0, 0x810, &(0x7f0000000980))

09:02:36 executing program 1:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x89, 0xfffffeba, 0x48, @local, @mcast2, 0x10, 0x10, 0x5, 0x20}})
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='Z\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000828bd7000fddbdf25010000000c3d3a44cff7b144ec00000008000500e000000108000400e00000010800090000000000080004007f00000008000500ac1414aa08000800040000000800000002000000"], 0x58}, 0x1, 0x0, 0x0, 0x2000810}, 0x40000)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0xe705e6686538da1e}, 0x4001)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0xbf, 0x0, 0x8001, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x7, 0x10, 0x1, 0x4}})

09:02:36 executing program 1:
socketpair(0x2b, 0x0, 0x900, &(0x7f0000000980))

09:02:36 executing program 1:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x89, 0xfffffeba, 0x48, @local, @mcast2, 0x10, 0x10, 0x5, 0x20}}) (async, rerun: 64)
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='Z\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000828bd7000fddbdf25010000000c3d3a44cff7b144ec00000008000500e000000108000400e00000010800090000000000080004007f00000008000500ac1414aa08000800040000000800000002000000"], 0x58}, 0x1, 0x0, 0x0, 0x2000810}, 0x40000) (async, rerun: 64)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0xe705e6686538da1e}, 0x4001) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0xbf, 0x0, 0x8001, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x7, 0x10, 0x1, 0x4}})

09:02:36 executing program 1:
socketpair(0x2b, 0x0, 0xa00, &(0x7f0000000980))

09:02:36 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
getpeername$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@id, &(0x7f0000000200)=0x10)
getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000380)={<r2=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f00000003c0)={r2, 0x6})
accept4$tipc(0xffffffffffffffff, &(0x7f0000000180)=@id, &(0x7f00000001c0)=0x10, 0x800)

09:02:36 executing program 1:
socketpair(0x2b, 0x0, 0x1008, &(0x7f0000000980))

09:02:36 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (rerun: 64)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
getpeername$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@id, &(0x7f0000000200)=0x10) (async)
getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000380)={<r2=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f00000003c0)={r2, 0x6})
accept4$tipc(0xffffffffffffffff, &(0x7f0000000180)=@id, &(0x7f00000001c0)=0x10, 0x800)

09:02:36 executing program 1:
socketpair(0x2b, 0x0, 0x1f00, &(0x7f0000000980))

09:02:36 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='syz1\x00'}}}}, 0x68}, 0x2}, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', <r3=>0x0, 0x4, 0x1, 0x4, 0x800, 0x28, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, 0x20, 0x40, 0x6f68, 0x9}})
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00N\x00', @ANYRES16=r2, @ANYBLOB="000227bd7000fcdbdf251200000008003100c50000000800310061000000050030000100000008000300", @ANYRES32=r3, @ANYBLOB="080039000100010005002d000000000006002800000000000800340005000000"], 0x54}, 0x1, 0x0, 0x0, 0x40801}, 0x4000010)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x80000000, @bearer=@l2={'eth', 0x3a, 'batadv0\x00'}}}}, ["", "", "", ""]}, 0x30}}, 0x20000081)

09:02:36 executing program 1:
socketpair(0x2b, 0x0, 0x2000, &(0x7f0000000980))

09:02:36 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='syz1\x00'}}}}, 0x68}, 0x2}, 0x0) (async)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', <r3=>0x0, 0x4, 0x1, 0x4, 0x800, 0x28, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, 0x20, 0x40, 0x6f68, 0x9}})
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00N\x00', @ANYRES16=r2, @ANYBLOB="000227bd7000fcdbdf251200000008003100c50000000800310061000000050030000100000008000300", @ANYRES32=r3, @ANYBLOB="080039000100010005002d000000000006002800000000000800340005000000"], 0x54}, 0x1, 0x0, 0x0, 0x40801}, 0x4000010) (async)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x80000000, @bearer=@l2={'eth', 0x3a, 'batadv0\x00'}}}}, ["", "", "", ""]}, 0x30}}, 0x20000081)

09:02:36 executing program 1:
socketpair(0x2b, 0x0, 0x3f00, &(0x7f0000000980))

09:02:36 executing program 1:
r0 = socket(0x15, 0x5, 0x7fd)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
socketpair(0x23, 0x6, 0x80006, &(0x7f0000000080))

09:02:37 executing program 3:
r0 = socket(0x15, 0x5, 0x7fd)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
socketpair(0x23, 0x6, 0x80006, &(0x7f0000000080))

09:02:37 executing program 1:
socketpair(0x2b, 0x0, 0x4000, &(0x7f0000000980))

09:02:37 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed}, 0x8)
connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8)
connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x5f]}}, 0x0, 0x2b}, 0x20)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/35, &(0x7f0000000040)=0x23)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x8, r2, 0x0, 0x0, 0x0, 0x0, 0x0})
connect$bt_sco(r2, &(0x7f0000000100), 0x8)

09:02:37 executing program 3:
socketpair(0x2b, 0x0, 0xf602, &(0x7f0000000980))

09:02:37 executing program 3:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x4}}, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)

09:02:37 executing program 3:
socketpair(0x2b, 0x0, 0x200000, &(0x7f0000000980))

09:02:37 executing program 3:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x4}}, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)

09:02:37 executing program 0:
socketpair(0x2b, 0x0, 0x1000000, &(0x7f0000000980))

09:02:37 executing program 3:
gettid() (async)
r0 = gettid()
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_tgsigqueueinfo(r1, r0, 0x0, &(0x7f0000000180)) (async)
rt_tgsigqueueinfo(r1, r0, 0x0, &(0x7f0000000180))
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x4, 0x3, {<r2=>0x0}, {0xee00}, 0x2, 0xe})
r3 = gettid()
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x60}, 0x0) (async)
sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x60}, 0x0)
r5 = epoll_create1(0x0)
epoll_pwait(r5, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000240)={r5, r6, 0x5})
epoll_create1(0x0) (async)
r7 = epoll_create1(0x0)
epoll_wait(r7, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x5, 0xfffffffc)
r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x642380, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r8, &(0x7f00000000c0)) (async)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r8, &(0x7f00000000c0))
ioctl$DRM_IOCTL_MODE_GET_LEASE(r8, 0xc01064c8, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r8, 0xc01064c8, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r9)
r10 = socket$inet(0x2, 0x2, 0x6)
r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r12 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x10b380, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r11, 0x3ba0, &(0x7f0000000240)={0x48, 0x8, r12, 0x0, 0x0, 0x0, 0x0, 0x0})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x1})
r13 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r13, 0x89f3, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @remote, 0x80, 0x0, 0xfffff40b}})
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r12, 0x80, &(0x7f0000000400)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x0, 0x0, 0x1}) (async)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r12, 0x80, &(0x7f0000000400)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x0, 0x0, 0x1})
epoll_create(0x2)
kcmp$KCMP_EPOLL_TFD(r0, r3, 0x7, r10, &(0x7f0000000000)={r12, r12, 0x2}) (async)
kcmp$KCMP_EPOLL_TFD(r0, r3, 0x7, r10, &(0x7f0000000000)={r12, r12, 0x2})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r14 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r14, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:37 executing program 0:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0)

09:02:37 executing program 0:
socketpair(0x2b, 0x0, 0x2000000, &(0x7f0000000980))

09:02:37 executing program 0:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0)

[ 1017.619245][ T5206] Bluetooth: hci1: command 0x041b tx timeout
09:02:37 executing program 0:
socketpair(0x2b, 0x0, 0x3000000, &(0x7f0000000980))

09:02:37 executing program 2:
r0 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x40000001})
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))

09:02:37 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none}, 0x8)
connect$bt_sco(r0, &(0x7f0000000000), 0x8)

09:02:37 executing program 2:
socketpair(0x2b, 0x0, 0x4000000, &(0x7f0000000980))

09:02:37 executing program 2:
r0 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x40000001})
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))
epoll_create1(0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x40000001}) (async)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)) (async)

09:02:37 executing program 2:
socketpair(0x2b, 0x0, 0x5000000, &(0x7f0000000980))

09:02:37 executing program 2:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}]}, 0x2c}}, 0x4100)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="08000b000400000008000c0004000000"], 0x54}}, 0x90)

09:02:37 executing program 2:
socketpair(0x2b, 0x0, 0x6000000, &(0x7f0000000980))

09:02:37 executing program 2:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}]}, 0x2c}}, 0x4100)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="08000b000400000008000c0004000000"], 0x54}}, 0x90)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}]}, 0x2c}}, 0x4100) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="08000b000400000008000c0004000000"], 0x54}}, 0x90) (async)

09:02:37 executing program 2:
socketpair(0x2b, 0x0, 0x7000000, &(0x7f0000000980))

09:02:37 executing program 2:
socketpair(0x2b, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40)

09:02:37 executing program 2:
socketpair(0x2b, 0x0, 0x8100000, &(0x7f0000000980))

09:02:37 executing program 2:
socketpair(0x2b, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40)

09:02:37 executing program 2:
socketpair(0x2b, 0x0, 0x9000000, &(0x7f0000000980))

[ 1018.009332][ T5206] Bluetooth: hci4: command 0x041b tx timeout
09:02:37 executing program 2:
socketpair(0x2b, 0x5, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0)

09:02:37 executing program 2:
socketpair(0x2b, 0x0, 0xa000000, &(0x7f0000000980))

09:02:37 executing program 2:
socketpair(0x2b, 0x5, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0)

09:02:37 executing program 2:
socketpair(0x2b, 0x5, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) (async)
syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0)

09:02:37 executing program 2:
socketpair(0x2b, 0x0, 0x10000000, &(0x7f0000000980))

09:02:37 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000001000000180000ff", @ANYRES32=<r0=>0xffffffffffffffff, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file0\x00'])
connect$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x4, 0x4}}, 0x10)
r1 = socket(0x1d, 0x2, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000051}, 0x1)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1)
setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e21, 0x1, @local, 0x20}, {0xa, 0x4e24, 0x8000, @private2, 0x1}, 0x1, {[0x2, 0x7, 0x1, 0x40, 0xffff, 0x7, 0x8, 0x1f]}}, 0x5c)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))

09:02:37 executing program 2:
socketpair(0x2b, 0x0, 0x1f000000, &(0x7f0000000980))

09:02:37 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000001000000180000ff", @ANYRES32=<r0=>0xffffffffffffffff, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file0\x00'])
connect$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x4, 0x4}}, 0x10) (async)
r1 = socket(0x1d, 0x2, 0x6)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000051}, 0x1) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1)
setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e21, 0x1, @local, 0x20}, {0xa, 0x4e24, 0x8000, @private2, 0x1}, 0x1, {[0x2, 0x7, 0x1, 0x40, 0xffff, 0x7, 0x8, 0x1f]}}, 0x5c) (async)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))

09:02:37 executing program 1:
socketpair(0x2b, 0x0, 0x20000000, &(0x7f0000000980))

09:02:37 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed}, 0x8)
connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8)
connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x5f]}}, 0x0, 0x2b}, 0x20)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/35, &(0x7f0000000040)=0x23)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) (async)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x8, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x8, r2, 0x0, 0x0, 0x0, 0x0, 0x0})
connect$bt_sco(r2, &(0x7f0000000100), 0x8)

09:02:37 executing program 2:
socketpair(0x2b, 0x0, 0x21000000, &(0x7f0000000980))

09:02:38 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
connect$bt_sco(r0, 0x0, 0x0)
r1 = epoll_create(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xa000201c})
socketpair(0xb, 0x5, 0xfffffffc, &(0x7f0000000980))

09:02:38 executing program 2:
socketpair(0x2b, 0x0, 0x3f000000, &(0x7f0000000980))

09:02:38 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
connect$bt_sco(r0, 0x0, 0x0)
r1 = epoll_create(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xa000201c})
socketpair(0xb, 0x5, 0xfffffffc, &(0x7f0000000980))

09:02:38 executing program 3:
socketpair(0x6, 0x4, 0x3ff, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0)

09:02:38 executing program 2:
socketpair(0x2b, 0x0, 0x40000000, &(0x7f0000000980))

09:02:38 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:38 executing program 3:
socketpair(0x2b, 0x0, 0x8cffffff, &(0x7f0000000980))

09:02:38 executing program 2:
socketpair(0x6, 0x4, 0x3ff, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0)
socketpair(0x6, 0x4, 0x3ff, &(0x7f0000000000)) (async)
syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0) (async)

09:02:38 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)

09:02:38 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40410}, 0x80)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000040)=""/114, &(0x7f00000000c0)=0x72)
connect$bt_sco(r2, &(0x7f0000000000), 0x8)
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:38 executing program 2:
socketpair(0x2b, 0x0, 0xf6020000, &(0x7f0000000980))

09:02:38 executing program 3:
socketpair(0x2b, 0x6, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x21140}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x22}}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x44}}, 0x4000000)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="46451cc3960b"}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x10)

09:02:38 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none}, 0x8)
connect$bt_sco(r0, &(0x7f0000000000), 0x8) (async)
connect$bt_sco(r0, &(0x7f0000000000), 0x8)

09:02:38 executing program 2:
socketpair(0x2b, 0x6, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x21140}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x22}}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x44}}, 0x4000000) (async)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="46451cc3960b"}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x10)

09:02:38 executing program 3:
socketpair(0x2b, 0x0, 0xfeffffff, &(0x7f0000000980))

09:02:38 executing program 2:
r0 = io_uring_setup(0x7638, &(0x7f0000000100)={0x0, 0x38f8, 0x200, 0x3, 0xb6})
syz_io_uring_setup(0x1ca1, &(0x7f0000000000)={0x0, 0x8c1e, 0x4, 0x0, 0xc8, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:38 executing program 3:
socketpair(0x22, 0x80000, 0x8, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r1, 0xe21, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz2\x00'}}}}, 0x34}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x82c00400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x10, 0x1, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)

09:02:38 executing program 2:
socketpair(0x2b, 0x0, 0xffffff8c, &(0x7f0000000980))

[ 1018.647060][T23009] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
09:02:38 executing program 2:
r0 = io_uring_setup(0x7638, &(0x7f0000000100)={0x0, 0x38f8, 0x200, 0x3, 0xb6})
syz_io_uring_setup(0x1ca1, &(0x7f0000000000)={0x0, 0x8c1e, 0x4, 0x0, 0xc8, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:38 executing program 3:
socketpair(0x2b, 0x0, 0xfffffffe, &(0x7f0000000980))

09:02:38 executing program 2:
socketpair(0x22, 0x80000, 0x8, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r1, 0xe21, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz2\x00'}}}}, 0x34}}, 0x0) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r1, 0xe21, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz2\x00'}}}}, 0x34}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x82c00400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x10, 0x1, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x82c00400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x10, 0x1, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)

09:02:38 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)

[ 1018.714229][T23017] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1018.717369][T23019] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
09:02:38 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680)={0x2, @fixed}, 0x8)

09:02:38 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)

09:02:38 executing program 3:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl0\x00', <r3=>0x0, 0x29, 0x20, 0xe2, 0x9, 0x1, @loopback, @empty, 0x20, 0xc8, 0x2, 0x8}})
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/ipc\x00')
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', <r5=>0x0, 0x29, 0xbe, 0x0, 0x1, 0x1a, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x10, 0x7, 0xffffffff, 0xd23}})
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)

09:02:38 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680)={0x2, @fixed}, 0x8)

09:02:38 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/130, &(0x7f0000000200)=0x82)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000140)=""/172, &(0x7f00000000c0)=0xac)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0xb, r2})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, r3)
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a8508735", @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000000000000074100f17c041239433a00004c00180000000062726f6164636173742d6c696e6b000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000002a0e6e72541e58b661a7b6cb8cc607258f1ac0"], 0x68}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r4)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x24, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x81}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xb234dddfaa599c2}, 0x14)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000540)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x8, 0x273935, 0x13213d})
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r5, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x10, 0x18, {0x401, @bearer=@l2={'eth', 0x3a, '\x00'}}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44)
connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

09:02:38 executing program 2:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl0\x00', <r3=>0x0, 0x29, 0x20, 0xe2, 0x9, 0x1, @loopback, @empty, 0x20, 0xc8, 0x2, 0x8}}) (async)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/ipc\x00')
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', <r5=>0x0, 0x29, 0xbe, 0x0, 0x1, 0x1a, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x10, 0x7, 0xffffffff, 0xd23}})
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)

09:02:38 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680)={0x2, @fixed}, 0x8)

09:02:38 executing program 2:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4)
connect$tipc(r1, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)

09:02:38 executing program 1:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async)
connect$tipc(r1, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)

09:02:38 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680)={0x2, @fixed}, 0x8)

09:02:38 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed}, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x8982, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)

09:02:38 executing program 1:
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680)={0x2, @fixed}, 0x8)

09:02:38 executing program 1:
socketpair(0x2b, 0x3, 0x0, &(0x7f0000000000))

09:02:38 executing program 1:
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680)={0x2, @fixed}, 0x8)

09:02:38 executing program 1:
socketpair(0x2b, 0x3, 0x0, &(0x7f0000000000))
socketpair(0x2b, 0x3, 0x0, &(0x7f0000000000)) (async)

09:02:38 executing program 1:
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680)={0x2, @fixed}, 0x8)

09:02:38 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0x6, 0x0, &(0x7f0000000040)=[<r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000100)={0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, <r2=>0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, <r3=>0x0], 0x3})
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000001c0)=[<r4=>0x0]})
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000440)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x1, 0x8, 0x5, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000780)={&(0x7f0000000540)=[0x0], &(0x7f0000000580)=[{}, {}, {}, {}, {}], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0, 0x0], &(0x7f0000000740)=[0x0], 0x5, 0x8, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000008c0)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000840)=[<r8=>0x0], &(0x7f0000000880)=[0x0, 0x0], 0x7, 0x1, 0x4})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000c00)={0x100, 0x8, &(0x7f00000004c0)=[r1, r2, r3, 0x0, r4, r5, r6, 0x0], &(0x7f0000000500)=[0xff, 0x5, 0x1000, 0x8, 0x4c47], &(0x7f0000000940)=[0x0, r7, 0x0, r8], &(0x7f0000000bc0)=[0xebdf, 0x101], 0x0, 0x9})
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))

09:02:39 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680)={0x2, @fixed}, 0x8)

09:02:39 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0x6, 0x0, &(0x7f0000000040)=[<r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000100)={0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, <r2=>0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, <r3=>0x0], 0x3})
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000001c0)=[<r4=>0x0]}) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, <r5=>0x0}) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000440)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x1, 0x8, 0x5, <r6=>0x0}) (async, rerun: 64)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000780)={&(0x7f0000000540)=[0x0], &(0x7f0000000580)=[{}, {}, {}, {}, {}], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0, 0x0], &(0x7f0000000740)=[0x0], 0x5, 0x8, 0x1}) (async, rerun: 64)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000008c0)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000840)=[<r8=>0x0], &(0x7f0000000880)=[0x0, 0x0], 0x7, 0x1, 0x4})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000c00)={0x100, 0x8, &(0x7f00000004c0)=[r1, r2, r3, 0x0, r4, r5, r6, 0x0], &(0x7f0000000500)=[0xff, 0x5, 0x1000, 0x8, 0x4c47], &(0x7f0000000940)=[0x0, r7, 0x0, r8], &(0x7f0000000bc0)=[0xebdf, 0x101], 0x0, 0x9}) (async)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))

09:02:39 executing program 0:
socketpair(0x1e, 0xa, 0x0, &(0x7f0000000980))

09:02:39 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680)={0x2, @fixed}, 0x8)

09:02:39 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40410}, 0x80)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000040)=""/114, &(0x7f00000000c0)=0x72)
connect$bt_sco(r2, &(0x7f0000000000), 0x8) (async)
connect$bt_sco(r2, &(0x7f0000000000), 0x8)
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:39 executing program 0:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680)={0x2, @fixed}, 0x8)

09:02:39 executing program 0:
socketpair(0x1e, 0xa, 0x0, &(0x7f0000000980))

09:02:39 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, 0x0, 0x0)

09:02:39 executing program 0:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
connect$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x3}}, 0x10)

09:02:39 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, 0x0, 0x0)

09:02:39 executing program 0:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
connect$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x3}}, 0x10)

09:02:39 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, 0x0, 0x0)

09:02:39 executing program 0:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x80111500, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x40000004})
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, 0x0)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00000088a94489e280136c30f9fe6ba44f2f5a3bf31c7c54f5b6a284c8c2b94261acd5872eea18e9c30b82b3a4d7abaaaf18fb3cfc676d7b78ece46345b4876a1ea9bd5cf8cb17e098fde127c4174e01ca76003ab45a560f87386a9a1f82023e0567fd776c4216b6d6ced023088000004856b7d927f1cd72bd1b691a523ddd148e8a2be550e1cd29be292549638ee383c34e8c1273e56c5d2cb2ebc545b8c7a7a4b1442b4998ebd544812287eb8b9b98fda9d42e3b2a826d40de0cccf251a5a0f7b044b742141852827aec9fadd29a7ded220bc36f8e37ee86720cd68a8c9ea0c05447b1abfd41193afc136fbdf6", @ANYRES16, @ANYBLOB="04002dbd7000fddbdf2500000000050006e504080000060002000100000006001a004e24000008000a00010000000504060000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20004040)
socketpair(0x10, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
connect$tipc(r2, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x10)

09:02:39 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680)={0xa, @fixed}, 0x8)

09:02:39 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/130, &(0x7f0000000200)=0x82) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000140)=""/172, &(0x7f00000000c0)=0xac) (async)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0xb, r2}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, r3)
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a8508735", @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000000000000074100f17c041239433a00004c00180000000062726f6164636173742d6c696e6b000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000002a0e6e72541e58b661a7b6cb8cc607258f1ac0"], 0x68}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r4)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) (async)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x24, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x81}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xb234dddfaa599c2}, 0x14)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000540)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x8, 0x273935, 0x13213d}) (async)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r5, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x10, 0x18, {0x401, @bearer=@l2={'eth', 0x3a, '\x00'}}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x44) (async)
connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

09:02:39 executing program 3:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x80111500, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x40000004})
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, 0x0)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00000088a94489e280136c30f9fe6ba44f2f5a3bf31c7c54f5b6a284c8c2b94261acd5872eea18e9c30b82b3a4d7abaaaf18fb3cfc676d7b78ece46345b4876a1ea9bd5cf8cb17e098fde127c4174e01ca76003ab45a560f87386a9a1f82023e0567fd776c4216b6d6ced023088000004856b7d927f1cd72bd1b691a523ddd148e8a2be550e1cd29be292549638ee383c34e8c1273e56c5d2cb2ebc545b8c7a7a4b1442b4998ebd544812287eb8b9b98fda9d42e3b2a826d40de0cccf251a5a0f7b044b742141852827aec9fadd29a7ded220bc36f8e37ee86720cd68a8c9ea0c05447b1abfd41193afc136fbdf6", @ANYRES16, @ANYBLOB="04002dbd7000fddbdf2500000000050006e504080000060002000100000006001a004e24000008000a00010000000504060000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20004040)
socketpair(0x10, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
connect$tipc(r2, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x10)

09:02:39 executing program 3:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x80111500, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x40000004})
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, 0x0)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00000088a94489e280136c30f9fe6ba44f2f5a3bf31c7c54f5b6a284c8c2b94261acd5872eea18e9c30b82b3a4d7abaaaf18fb3cfc676d7b78ece46345b4876a1ea9bd5cf8cb17e098fde127c4174e01ca76003ab45a560f87386a9a1f82023e0567fd776c4216b6d6ced023088000004856b7d927f1cd72bd1b691a523ddd148e8a2be550e1cd29be292549638ee383c34e8c1273e56c5d2cb2ebc545b8c7a7a4b1442b4998ebd544812287eb8b9b98fda9d42e3b2a826d40de0cccf251a5a0f7b044b742141852827aec9fadd29a7ded220bc36f8e37ee86720cd68a8c9ea0c05447b1abfd41193afc136fbdf6", @ANYRES16, @ANYBLOB="04002dbd7000fddbdf2500000000050006e504080000060002000100000006001a004e24000008000a00010000000504060000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20004040)
socketpair(0x10, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
connect$tipc(r2, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x10)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x80111500, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x40000004}) (async)
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, 0x0) (async)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00000088a94489e280136c30f9fe6ba44f2f5a3bf31c7c54f5b6a284c8c2b94261acd5872eea18e9c30b82b3a4d7abaaaf18fb3cfc676d7b78ece46345b4876a1ea9bd5cf8cb17e098fde127c4174e01ca76003ab45a560f87386a9a1f82023e0567fd776c4216b6d6ced023088000004856b7d927f1cd72bd1b691a523ddd148e8a2be550e1cd29be292549638ee383c34e8c1273e56c5d2cb2ebc545b8c7a7a4b1442b4998ebd544812287eb8b9b98fda9d42e3b2a826d40de0cccf251a5a0f7b044b742141852827aec9fadd29a7ded220bc36f8e37ee86720cd68a8c9ea0c05447b1abfd41193afc136fbdf6", @ANYRES16, @ANYBLOB="04002dbd7000fddbdf2500000000050006e504080000060002000100000006001a004e24000008000a00010000000504060000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20004040) (async)
socketpair(0x10, 0x2, 0x0, &(0x7f0000000000)) (async)
connect$tipc(r2, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x10) (async)

[ 1019.699383][ T5206] Bluetooth: hci1: command 0x041b tx timeout
09:02:39 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x80111500, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x40000004})
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, 0x0)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00000088a94489e280136c30f9fe6ba44f2f5a3bf31c7c54f5b6a284c8c2b94261acd5872eea18e9c30b82b3a4d7abaaaf18fb3cfc676d7b78ece46345b4876a1ea9bd5cf8cb17e098fde127c4174e01ca76003ab45a560f87386a9a1f82023e0567fd776c4216b6d6ced023088000004856b7d927f1cd72bd1b691a523ddd148e8a2be550e1cd29be292549638ee383c34e8c1273e56c5d2cb2ebc545b8c7a7a4b1442b4998ebd544812287eb8b9b98fda9d42e3b2a826d40de0cccf251a5a0f7b044b742141852827aec9fadd29a7ded220bc36f8e37ee86720cd68a8c9ea0c05447b1abfd41193afc136fbdf6", @ANYRES16, @ANYBLOB="04002dbd7000fddbdf2500000000050006e504080000060002000100000006001a004e24000008000a00010000000504060000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20004040)
socketpair(0x10, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
connect$tipc(r2, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x10)

09:02:39 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed}, 0x8)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x8982, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)

09:02:39 executing program 3:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

09:02:39 executing program 2:
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x800)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x480c4)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_TID={0xc}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4049810)

09:02:39 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x80111500, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x40000004})
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, 0x0)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00000088a94489e280136c30f9fe6ba44f2f5a3bf31c7c54f5b6a284c8c2b94261acd5872eea18e9c30b82b3a4d7abaaaf18fb3cfc676d7b78ece46345b4876a1ea9bd5cf8cb17e098fde127c4174e01ca76003ab45a560f87386a9a1f82023e0567fd776c4216b6d6ced023088000004856b7d927f1cd72bd1b691a523ddd148e8a2be550e1cd29be292549638ee383c34e8c1273e56c5d2cb2ebc545b8c7a7a4b1442b4998ebd544812287eb8b9b98fda9d42e3b2a826d40de0cccf251a5a0f7b044b742141852827aec9fadd29a7ded220bc36f8e37ee86720cd68a8c9ea0c05447b1abfd41193afc136fbdf6", @ANYRES16, @ANYBLOB="04002dbd7000fddbdf2500000000050006e504080000060002000100000006001a004e24000008000a00010000000504060000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20004040)
socketpair(0x10, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
connect$tipc(r2, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x10)

09:02:39 executing program 2:
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x800)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x480c4)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_TID={0xc}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4049810)
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x800) (async)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)) (async)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
epoll_create(0x1f) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) (async)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x480c4) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) (async)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_TID={0xc}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4049810) (async)

09:02:39 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x80111500, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x40000004})
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, 0x0)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00000088a94489e280136c30f9fe6ba44f2f5a3bf31c7c54f5b6a284c8c2b94261acd5872eea18e9c30b82b3a4d7abaaaf18fb3cfc676d7b78ece46345b4876a1ea9bd5cf8cb17e098fde127c4174e01ca76003ab45a560f87386a9a1f82023e0567fd776c4216b6d6ced023088000004856b7d927f1cd72bd1b691a523ddd148e8a2be550e1cd29be292549638ee383c34e8c1273e56c5d2cb2ebc545b8c7a7a4b1442b4998ebd544812287eb8b9b98fda9d42e3b2a826d40de0cccf251a5a0f7b044b742141852827aec9fadd29a7ded220bc36f8e37ee86720cd68a8c9ea0c05447b1abfd41193afc136fbdf6", @ANYRES16, @ANYBLOB="04002dbd7000fddbdf2500000000050006e504080000060002000100000006001a004e24000008000a00010000000504060000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20004040)
socketpair(0x10, 0x2, 0x0, &(0x7f0000000000))

09:02:39 executing program 2:
r0 = epoll_create1(0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x4020940d, &(0x7f0000000540)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x29})
socketpair(0x2b, 0x5, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)

09:02:39 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x80111500, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x40000004})
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, 0x0)
socketpair(0x10, 0x2, 0x0, &(0x7f0000000000))

09:02:39 executing program 2:
r0 = epoll_create1(0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x4020940d, &(0x7f0000000540)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x29})
socketpair(0x2b, 0x5, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
epoll_create1(0x0) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async)
ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x4020940d, &(0x7f0000000540)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}) (async)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x29}) (async)
socketpair(0x2b, 0x5, 0x0, &(0x7f0000000980)) (async)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)

09:02:39 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x80111500, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x40000004})
socketpair(0x10, 0x2, 0x0, &(0x7f0000000000))

09:02:39 executing program 2:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18000124}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008040)

09:02:39 executing program 2:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x80111500, 0x0)
socketpair(0x10, 0x2, 0x0, &(0x7f0000000000))

09:02:39 executing program 2:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)) (async)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18000124}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008040)

09:02:39 executing program 2:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x10, 0x2, 0x0, &(0x7f0000000000))

09:02:39 executing program 2:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, 0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x8, r1, 0x0, 0x3, 0x2f097a, 0x4c, &(0x7f0000000100)="c6e3aa3fe55155e101d7adc7de8b29e7512cfc8befc1d66b15b6e9d722ff4bf9c32d26b6a31fb7cdf5838320e5f9dccf543155f44d79a5ef5e5ed594ec0f8ded7f9c181b759b1e0bcd82c8ef", 0x10005})
socketpair(0x1e, 0x80000, 0x0, &(0x7f0000000000))

09:02:39 executing program 2:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
socketpair(0x10, 0x2, 0x0, &(0x7f0000000000))

[ 1020.089481][ T5206] Bluetooth: hci4: command 0x041b tx timeout
09:02:39 executing program 2:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, 0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x8, r1, 0x0, 0x3, 0x2f097a, 0x4c, &(0x7f0000000100)="c6e3aa3fe55155e101d7adc7de8b29e7512cfc8befc1d66b15b6e9d722ff4bf9c32d26b6a31fb7cdf5838320e5f9dccf543155f44d79a5ef5e5ed594ec0f8ded7f9c181b759b1e0bcd82c8ef", 0x10005}) (async)
socketpair(0x1e, 0x80000, 0x0, &(0x7f0000000000))

09:02:39 executing program 2:
socketpair(0x10, 0x2, 0x0, &(0x7f0000000000))

09:02:39 executing program 1:
socketpair(0x0, 0x2, 0x0, &(0x7f0000000000))

09:02:39 executing program 2:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x40049409, 0x0)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000380)={0x6})
r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000380))
r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r7, &(0x7f00000000c0))
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_NET_NS_FD={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0xc844}, 0x0)

09:02:39 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = gettid()
syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/net\x00')
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/175, &(0x7f00000000c0)=0xaf)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:40 executing program 1:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x40049409, 0x0)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
epoll_create(0x1f) (async)
r4 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000380)={0x6})
r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)) (async)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000380)) (async)
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000380))
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) (async)
r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r7, &(0x7f00000000c0))
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_NET_NS_FD={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0xc844}, 0x0)

09:02:40 executing program 2:
socketpair(0x0, 0x2, 0x0, &(0x7f0000000000))

09:02:40 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r1 = gettid()
syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/net\x00') (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/175, &(0x7f00000000c0)=0xaf) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:40 executing program 2:
r0 = syz_clone(0x1200000, &(0x7f0000000040)="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", 0x1000, &(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0)="28a9c2da9832bbbf628ec922c56832e91557f349baca0028b7397823470d46544646138fce70fa92f77e36bc01ae72b12ae8fb546b2f5931c6912d29068d79c5993773b0629984fd55f89814ba88c8f96987e0905d3c115c78bccc9b4ab8462cd6a030a80f81fa421f4e114259ee5c6577a4a5ff40e5c130e171fcd2b13e0167adde44d9b709c691c2676c2c728ea9c0b83093882c8531bb8bdf1a66a73637f41a9b6b3f27ce91f920bc8868ed1067c8ab1d4c7e55b637246ab73092f0bced90b3513f0a313ef72b77ae1642cf483aad7fd4ebb413d2a65a8b9bd7f51d03f9bd6b58")
r1 = getpgid(0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x10000004})
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000001240)={0x2})
setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r4, &(0x7f0000001200)={r4, r4, 0x76d})
kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f00000011c0)={r3, r5, 0x4})
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000000))

09:02:40 executing program 1:
socketpair(0x0, 0x2, 0x0, &(0x7f0000000000))

09:02:40 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f0000000040), 0x8)
socket(0x18, 0x4, 0xf1c0)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000000))

09:02:40 executing program 2:
r0 = syz_clone(0x1200000, &(0x7f0000000040)="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", 0x1000, &(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0)="28a9c2da9832bbbf628ec922c56832e91557f349baca0028b7397823470d46544646138fce70fa92f77e36bc01ae72b12ae8fb546b2f5931c6912d29068d79c5993773b0629984fd55f89814ba88c8f96987e0905d3c115c78bccc9b4ab8462cd6a030a80f81fa421f4e114259ee5c6577a4a5ff40e5c130e171fcd2b13e0167adde44d9b709c691c2676c2c728ea9c0b83093882c8531bb8bdf1a66a73637f41a9b6b3f27ce91f920bc8868ed1067c8ab1d4c7e55b637246ab73092f0bced90b3513f0a313ef72b77ae1642cf483aad7fd4ebb413d2a65a8b9bd7f51d03f9bd6b58")
r1 = getpgid(0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x10000004}) (async)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000001240)={0x2})
setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r4, &(0x7f0000001200)={r4, r4, 0x76d}) (async)
kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f00000011c0)={r3, r5, 0x4}) (async)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000000))

09:02:40 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f0000000040), 0x8)
socket(0x18, 0x4, 0xf1c0)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000000))

09:02:40 executing program 2:
socketpair(0x10, 0x0, 0x0, &(0x7f0000000000))

09:02:40 executing program 2:
clock_gettime(0x4, &(0x7f0000000000))

09:02:40 executing program 1:
socketpair(0x10, 0x0, 0x0, &(0x7f0000000000))

09:02:40 executing program 0:
clock_gettime(0x4, &(0x7f0000000000))

09:02:40 executing program 3:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x4401, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, <r1=>0x0]})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x7, 0x6, 0x1, 0x3})
r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000300)={0x8, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={r1, 0x0, r2, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0]})
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))

09:02:40 executing program 2:
socketpair(0x10, 0x0, 0x0, &(0x7f0000000000))

09:02:40 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000000))
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8)

09:02:40 executing program 0:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x541340, 0x0)
write$bt_hci(r0, &(0x7f00000000c0)={0x1, @sniff_subrate={{0x811, 0x8}, {0xc9, 0xb3, 0x6, 0xdc4f}}}, 0xc)
setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e20, 0x301, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, {0xa, 0x4e22, 0xfffffffc, @loopback, 0x7c}, 0x0, {[0x4, 0x4, 0x5, 0x1, 0xfffffff9, 0x7, 0x773, 0x1]}}, 0x5c)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000680)={0x1f, @fixed}, 0x8)

09:02:40 executing program 2:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

09:02:40 executing program 3:
socketpair(0x10, 0x2, 0x0, 0x0)

09:02:40 executing program 3:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x4401, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) (async)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, <r1=>0x0]})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x7, 0x6, 0x1, 0x3})
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) (async)
r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000300)={0x8, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={r1, 0x0, r2, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0]})
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))

09:02:40 executing program 3:
socketpair(0x10, 0x2, 0x0, 0x0)

09:02:40 executing program 3:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x24, r5, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x300}, 0x1c}}, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xffffffff}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1)
r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/ipc\x00')
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000)

09:02:40 executing program 3:
socketpair(0x10, 0x2, 0x0, 0x0)

09:02:40 executing program 3:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x24, r5, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x300}, 0x1c}}, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xffffffff}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1)
r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/ipc\x00')
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000)

09:02:40 executing program 3:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x24, r5, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x300}, 0x1c}}, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xffffffff}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1)
r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/ipc\x00')
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) (async)
sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x24, r5, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x300}, 0x1c}}, 0x0) (async)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xffffffff}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1) (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/ipc\x00') (async)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) (async)

09:02:40 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed}, 0x8)

09:02:40 executing program 3:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r0, 0x4, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x24000001)
socketpair(0x21, 0x0, 0x0, &(0x7f0000000980)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r4=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f00000000c0)=<r5=>0x0, &(0x7f0000000100)=0x4)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="110028bd7000ffdbdf2506000000080009000000000008008657", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="0c000300040000000000000008000500e0000002060006000200000008000900000000000c0003000200000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x6923e77ceb72960d}, 0x4000)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0xc004)

09:02:40 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x2}}, 0x8)

09:02:41 executing program 0:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r0, 0x4, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x24000001) (async)
socketpair(0x21, 0x0, 0x0, &(0x7f0000000980)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r4=>0x0}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f00000000c0)=<r5=>0x0, &(0x7f0000000100)=0x4)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="110028bd7000ffdbdf2506000000080009000000000008008657", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="0c000300040000000000000008000500e0000002060006000200000008000900000000000c0003000200000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x6923e77ceb72960d}, 0x4000) (async)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0xc004)

09:02:41 executing program 1:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x541340, 0x0)
write$bt_hci(r0, &(0x7f00000000c0)={0x1, @sniff_subrate={{0x811, 0x8}, {0xc9, 0xb3, 0x6, 0xdc4f}}}, 0xc)
setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e20, 0x301, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, {0xa, 0x4e22, 0xfffffffc, @loopback, 0x7c}, 0x0, {[0x4, 0x4, 0x5, 0x1, 0xfffffff9, 0x7, 0x773, 0x1]}}, 0x5c)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000680)={0x1f, @fixed}, 0x8)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x541340, 0x0) (async)
write$bt_hci(r0, &(0x7f00000000c0)={0x1, @sniff_subrate={{0x811, 0x8}, {0xc9, 0xb3, 0x6, 0xdc4f}}}, 0xc) (async)
setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e20, 0x301, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, {0xa, 0x4e22, 0xfffffffc, @loopback, 0x7c}, 0x0, {[0x4, 0x4, 0x5, 0x1, 0xfffffff9, 0x7, 0x773, 0x1]}}, 0x5c) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
connect$bt_sco(r1, &(0x7f0000000680)={0x1f, @fixed}, 0x8) (async)

09:02:41 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000000)) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8)

09:02:41 executing program 2:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3d}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xffff}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20004080)
syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r1)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x0, 0x4}}}, 0x10)

09:02:41 executing program 2:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3d}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xffff}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20004080)
syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r1)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x0, 0x4}}}, 0x10)

09:02:41 executing program 1:
r0 = epoll_create1(0x80000)
epoll_wait(r0, &(0x7f0000000240)=[{}, {}, {}, {}], 0x4, 0x100)
epoll_pwait2(r0, &(0x7f0000000080)=[{}, {}, {}, {}], 0x4, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f00000000c0)={[0x200000000000004]}, 0x8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
epoll_pwait(r0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfff, &(0x7f00000001c0)={[0x1b7]}, 0x8)
connect$bt_sco(r2, &(0x7f0000000680)={0x1f, @fixed}, 0x8)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
epoll_wait(r0, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x7)
epoll_wait(r0, &(0x7f0000000200)=[{}], 0x1, 0x7)
connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r3)

09:02:41 executing program 2:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3d}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xffff}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20004080)
syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r1)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x0, 0x4}}}, 0x10)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) (async)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3d}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xffff}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20004080) (async)
syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r1) (async)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x0, 0x4}}}, 0x10) (async)

09:02:41 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @none}, 0x8)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0x8000, &(0x7f0000000080), 0x8)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYRES64=r2], 0x68}, 0x1, 0x0, 0x0, 0x4044800}, 0x40040)
connect$bt_sco(r2, &(0x7f0000000680)={0x1f, @fixed}, 0x8)

09:02:41 executing program 3:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x43}, 0x1}}, 0x10)

[ 1021.769268][ T5206] Bluetooth: hci1: command 0x041b tx timeout
09:02:41 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x4}}, 0x8)

[ 1022.169304][ T5206] Bluetooth: hci4: command 0x041b tx timeout
09:02:42 executing program 0:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x43}, 0x1}}, 0x10)
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)) (async)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x43}, 0x1}}, 0x10) (async)

09:02:42 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)

09:02:42 executing program 1:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', <r1=>0x0, 0x2f, 0x8, 0x6, 0x81, 0x26, @loopback, @local, 0x10, 0x1, 0x4, 0x7}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf2503810000000000000000000008001700", @ANYRES32, @ANYBLOB="1400080076657468305f746f5f6873720000000006001a004e200000"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20046000)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x2f, 0x6, 0x0, 0x8000, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, 0x20, 0x700, 0x7, 0x20}})

[ 1022.436807][T23260] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'.
09:02:42 executing program 2:
r0 = epoll_create1(0x80000)
epoll_wait(r0, &(0x7f0000000240)=[{}, {}, {}, {}], 0x4, 0x100)
epoll_pwait2(r0, &(0x7f0000000080)=[{}, {}, {}, {}], 0x4, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f00000000c0)={[0x200000000000004]}, 0x8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
epoll_pwait(r0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfff, &(0x7f00000001c0)={[0x1b7]}, 0x8)
connect$bt_sco(r2, &(0x7f0000000680)={0x1f, @fixed}, 0x8) (async)
connect$bt_sco(r2, &(0x7f0000000680)={0x1f, @fixed}, 0x8)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
epoll_wait(r0, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x7) (async)
epoll_wait(r0, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x7)
epoll_wait(r0, &(0x7f0000000200)=[{}], 0x1, 0x7)
connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async)
connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r3)

09:02:42 executing program 1:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @none}, 0x8) (async)
connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @none}, 0x8)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0x8000, &(0x7f0000000080), 0x8) (async)
epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0x8000, &(0x7f0000000080), 0x8)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYRES64=r2], 0x68}, 0x1, 0x0, 0x0, 0x4044800}, 0x40040)
connect$bt_sco(r2, &(0x7f0000000680)={0x1f, @fixed}, 0x8)

09:02:42 executing program 2:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', <r1=>0x0, 0x2f, 0x8, 0x6, 0x81, 0x26, @loopback, @local, 0x10, 0x1, 0x4, 0x7}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf2503810000000000000000000008001700", @ANYRES32, @ANYBLOB="1400080076657468305f746f5f6873720000000006001a004e200000"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20046000)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x2f, 0x6, 0x0, 0x8000, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, 0x20, 0x700, 0x7, 0x20}})
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980)) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x6, 0x81, 0x26, @loopback, @local, 0x10, 0x1, 0x4, 0x7}}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf2503810000000000000000000008001700", @ANYRES32, @ANYBLOB="1400080076657468305f746f5f6873720000000006001a004e200000"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20046000) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x2f, 0x6, 0x0, 0x8000, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, 0x20, 0x700, 0x7, 0x20}}) (async)

[ 1022.610433][T23271] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'.
09:02:42 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)

09:02:42 executing program 3:
socketpair(0x18, 0x0, 0x0, &(0x7f0000000980))

09:02:42 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, 0x8)

09:02:42 executing program 0:
socketpair(0x18, 0x0, 0x0, &(0x7f0000000980))
socketpair(0x18, 0x0, 0x0, &(0x7f0000000980)) (async)

09:02:42 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async, rerun: 32)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32)
connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)

09:02:42 executing program 1:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000000980))

09:02:42 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed}, 0x8)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1)
ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0xfffffffffffffffd)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xef}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x2c}}, 0x4018)

09:02:43 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x10)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000b00)=ANY=[@ANYBLOB="006c00008100c0336744000000000000000042b62100166b3286d8a174a5f0de088c59d4d56ccbd50bf69f8698abeb8eb3cc7138791477f82405d5d2c19bb2087f730e610c7987bf41d9c25e60f9d969c9c2f7ff3bbe25ab8aef212f67f89ab44a6215e7092d27a2d9de9286240cb3d9ab21a5dd69e2da3dfa962ca9d5", @ANYRES32=<r2=>r1, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB='./file0\x00'])
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r3, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4011)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x208280, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000480)={&(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[{}, {}, {}], &(0x7f0000000400)=[0x0, <r5=>0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x3, 0x5, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[{}], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, <r6=>0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x2})
r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r7, 0x0, 0x0)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r8, &(0x7f0000000680)={0x1f, @fixed}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {<r9=>0xee00, 0xee00}}, './file0\x00'})
newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}, 0x6000)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r8, {r9, r10}}, './file0\x00'})
ioctl$DRM_IOCTL_ADD_CTX(r7, 0xc0086420, &(0x7f0000000c80)={<r11=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000cc0)={r11, 0x3})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000800)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[{}], &(0x7f0000000780)=[0x0, 0x0, <r12=>0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x4})
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000900)={0x1, 0x1, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0xf8], &(0x7f0000000880)=[r5, 0x0, 0x0, r6, r12], &(0x7f00000008c0)=[0x7fff, 0x80000000, 0xe08, 0xa, 0x1, 0x7, 0x800], 0x0, 0xc190})
r13 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r13)

09:02:43 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)

09:02:43 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x82}}, 0x8)

[ 1023.859568][ T5206] Bluetooth: hci1: command 0x041b tx timeout
09:02:43 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x10) (async)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000b00)=ANY=[@ANYBLOB="006c00008100c0336744000000000000000042b62100166b3286d8a174a5f0de088c59d4d56ccbd50bf69f8698abeb8eb3cc7138791477f82405d5d2c19bb2087f730e610c7987bf41d9c25e60f9d969c9c2f7ff3bbe25ab8aef212f67f89ab44a6215e7092d27a2d9de9286240cb3d9ab21a5dd69e2da3dfa962ca9d5", @ANYRES32=<r2=>r1, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) (async)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r3, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4011) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) (async)
r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x208280, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000480)={&(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[{}, {}, {}], &(0x7f0000000400)=[0x0, <r5=>0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x3, 0x5, 0x1}) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[{}], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, <r6=>0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x2}) (async)
r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r7, 0x0, 0x0) (async)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r8, &(0x7f0000000680)={0x1f, @fixed}, 0x8) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {<r9=>0xee00, 0xee00}}, './file0\x00'})
newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}, 0x6000)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r8, {r9, r10}}, './file0\x00'})
ioctl$DRM_IOCTL_ADD_CTX(r7, 0xc0086420, &(0x7f0000000c80)={<r11=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000cc0)={r11, 0x3}) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000800)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[{}], &(0x7f0000000780)=[0x0, 0x0, <r12=>0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x4})
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000900)={0x1, 0x1, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0xf8], &(0x7f0000000880)=[r5, 0x0, 0x0, r6, r12], &(0x7f00000008c0)=[0x7fff, 0x80000000, 0xe08, 0xa, 0x1, 0x7, 0x800], 0x0, 0xc190}) (async)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r13)

09:02:43 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed}, 0x8) (async)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) (async)
ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, 0xfffffffffffffffd)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xef}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x2c}}, 0x4018)

09:02:43 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES64=r1, @ANYRES64=r0, @ANYRESHEX=r2], 0x30}}, 0x8411)
socketpair(0x0, 0x80000, 0x10000, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$bt_sco(r3, &(0x7f00000000c0), 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r4)

09:02:43 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)

[ 1024.249265][ T5206] Bluetooth: hci4: command 0x041b tx timeout
09:02:44 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = gettid()
ptrace$ARCH_GET_FS(0x1e, r3, 0x0, 0x1003)
r4 = getpgid(0xffffffffffffffff)
kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r1, &(0x7f0000000380)={0xffffffffffffffff, r2, 0xebdc})
r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r2)
r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r6, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x24008000)
r9 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r10=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x48)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r5, 0x7de9ead670fd54f, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_LINK={0x8, 0x1, r10}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)

09:02:44 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x82}}, 0x8)

09:02:44 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed}, 0x7)

09:02:44 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed}, 0x8)
r1 = socket(0x25, 0x1, 0x0)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8)

09:02:44 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8) (async)
connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES64=r1, @ANYRES64=r0, @ANYRESHEX=r2], 0x30}}, 0x8411)
socketpair(0x0, 0x80000, 0x10000, &(0x7f0000000080)) (async)
socketpair(0x0, 0x80000, 0x10000, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$bt_sco(r3, &(0x7f00000000c0), 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r4)

09:02:44 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed}, 0x7)

09:02:44 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async)

09:02:44 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:44 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = gettid()
ptrace$ARCH_GET_FS(0x1e, r3, 0x0, 0x1003)
r4 = getpgid(0xffffffffffffffff)
kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r1, &(0x7f0000000380)={0xffffffffffffffff, r2, 0xebdc}) (async)
r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r2) (async)
r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r6, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x24008000)
r9 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r10=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x48)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r5, 0x7de9ead670fd54f, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_LINK={0x8, 0x1, r10}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)

09:02:44 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)

09:02:44 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000001c0))
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x2, 0x8, 0x5})

09:02:44 executing program 3:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x121080, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=<r1=>0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0xffffffffffffffff, <r3=>0xee01}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB='./Rilo0\x00'])
r4 = epoll_create1(0x0)
epoll_pwait(r4, &(0x7f0000000100)=[{}, {}, {}], 0x15555555555558ca, 0x2, &(0x7f0000000140)={[0xfffffffffffffffd]}, 0x8)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = socket(0x6, 0x3, 0x619)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {<r7=>r1, r3}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {r7, 0xee00}}, './file0\x00'})
bind$bt_sco(r6, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r5, &(0x7f00000000c0)={0x1f, @none}, 0x8)
connect$bt_sco(r5, &(0x7f0000000080), 0x8)
getsockopt$bt_sco_SCO_OPTIONS(r5, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:44 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000001c0)) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x2, 0x8, 0x5})

09:02:44 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:45 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x1, 0x4})
r1 = getpid()
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f00000002c0)={0x1f, 0x1, 0x3}, 0x6)
r3 = getpid()
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r4)
socketpair(0x25, 0xa, 0x0, &(0x7f0000000280)={<r6=>0xffffffffffffffff})
syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r7, &(0x7f00000000c0)={r8})
rt_tgsigqueueinfo(r3, r1, 0x3d, &(0x7f0000000340)={0x26, 0x9, 0x4})
r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0)
kcmp$KCMP_EPOLL_TFD(r1, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000200)={r9, r0, 0xf4})

09:02:45 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:45 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x1, 0x4}) (async, rerun: 64)
r1 = getpid() (rerun: 64)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f00000002c0)={0x1f, 0x1, 0x3}, 0x6) (async)
r3 = getpid() (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), 0xffffffffffffffff) (rerun: 64)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) (async, rerun: 32)
syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r4) (rerun: 32)
socketpair(0x25, 0xa, 0x0, &(0x7f0000000280)={<r6=>0xffffffffffffffff})
syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r6) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r7, &(0x7f00000000c0)={r8}) (async)
rt_tgsigqueueinfo(r3, r1, 0x3d, &(0x7f0000000340)={0x26, 0x9, 0x4})
r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0)
kcmp$KCMP_EPOLL_TFD(r1, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000200)={r9, r0, 0xf4})

09:02:45 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:45 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20401, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=[<r1=>0x0, <r2=>0x0], &(0x7f0000000100)=[0x0, 0x0], 0x6, 0x2, 0x6})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={&(0x7f00000003c0)=[<r3=>0x0], &(0x7f0000000400)=[0x0, 0x0, <r4=>0x0, 0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[<r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x1, 0xa, 0x7, 0x3})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000500)={0x8000000000000000, r1, r7})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000640)={&(0x7f0000000600)=[0x0, 0x0, 0x0], 0x3, r5})
r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f00000005c0)={0x40, r2, r6, 0xeeeeeeee})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r8, 0xc01064c1, &(0x7f00000006c0)={0x0, 0x0, <r9=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000700)={0x0, 0x0, r9})
r10 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x90041, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r10, 0xc0086420, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r10, 0xc02064b6, &(0x7f0000000580)={0x0, r4, r3, 0x0, 0x0, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0]})

09:02:45 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x4b47, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:45 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20401, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=[<r1=>0x0, <r2=>0x0], &(0x7f0000000100)=[0x0, 0x0], 0x6, 0x2, 0x6})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={&(0x7f00000003c0)=[<r3=>0x0], &(0x7f0000000400)=[0x0, 0x0, <r4=>0x0, 0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[<r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x1, 0xa, 0x7, 0x3})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000500)={0x8000000000000000, r1, r7})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000640)={&(0x7f0000000600)=[0x0, 0x0, 0x0], 0x3, r5})
r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f00000005c0)={0x40, r2, r6, 0xeeeeeeee})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r8, 0xc01064c1, &(0x7f00000006c0)={0x0, 0x0, <r9=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000700)={0x0, 0x0, r9})
r10 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x90041, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r10, 0xc0086420, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r10, 0xc02064b6, &(0x7f0000000580)={0x0, r4, r3, 0x0, 0x0, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0]})
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20401, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x6, 0x2, 0x6}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={&(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x1, 0xa, 0x7, 0x3}) (async)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000500)={0x8000000000000000, r1, r7}) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000640)={&(0x7f0000000600)=[0x0, 0x0, 0x0], 0x3, r5}) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) (async)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f00000005c0)={0x40, r2, r6, 0xeeeeeeee}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r8, 0xc01064c1, &(0x7f00000006c0)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000700)={0x0, 0x0, r9}) (async)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x90041, 0x0) (async)
ioctl$DRM_IOCTL_ADD_CTX(r10, 0xc0086420, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(r10, 0xc02064b6, &(0x7f0000000580)={0x0, r4, r3, 0x0, 0x0, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async)

09:02:45 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x4b49, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:45 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040))
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:45 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x541b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:45 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040))
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) (async)

09:02:45 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed}, 0x8)
r1 = socket(0x25, 0x1, 0x0)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8)

09:02:45 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed}, 0x8)
socket(0x25, 0x1, 0x0) (async)
r1 = socket(0x25, 0x1, 0x0)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) (async)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8)

09:02:45 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:45 executing program 2:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair(0x8, 0x3, 0x80000001, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x400, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10040044}, 0x4048000)

09:02:45 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:45 executing program 2:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
socketpair(0x8, 0x3, 0x80000001, &(0x7f0000000000)={<r0=>0xffffffffffffffff}) (async)
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x400, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10040044}, 0x4048000)

09:02:45 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)={0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0, 0x0, r1})

09:02:45 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)

[ 1025.834116][ T5209] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
09:02:45 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)={0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0, 0x0, r1})

[ 1025.844961][ T5209] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1025.854001][ T5209] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1025.857689][ T5209] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1025.863503][ T5209] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
09:02:45 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)

[ 1025.866578][ T5209] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
09:02:45 executing program 3:
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r0=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100004018000000ad093fafccb8def8621f3318d1a2a0f105319e148edd0a962163b8152848993cc42777965490aba72c", @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="cd07b72ee58569dfed"])
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000180)={r0, 0x0, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x0, r2})
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x1})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000000)={0x0, 0x0, r2})

09:02:45 executing program 2:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x121080, 0x0) (async)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=<r1=>0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0xffffffffffffffff, <r3=>0xee01}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB='./Rilo0\x00'])
r4 = epoll_create1(0x0)
epoll_pwait(r4, &(0x7f0000000100)=[{}, {}, {}], 0x15555555555558ca, 0x2, &(0x7f0000000140)={[0xfffffffffffffffd]}, 0x8) (async)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = socket(0x6, 0x3, 0x619) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {<r7=>r1, r3}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {r7, 0xee00}}, './file0\x00'}) (async)
bind$bt_sco(r6, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r5, &(0x7f00000000c0)={0x1f, @none}, 0x8)
connect$bt_sco(r5, &(0x7f0000000080), 0x8) (async)
getsockopt$bt_sco_SCO_OPTIONS(r5, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:45 executing program 3:
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="0a557cafbcf6d3d1e467af4ad95270e512c63cb54813e4f1c5cfaef09eb1d21718dde474aae140b369de663e794d09dbf7f5b19b386e6c37d2066c3b38a9dcb4e7e154a86e760f079b0814f9425d9ed849ad96b640d5b36a1b9b844ceba7f7fbfc4d1c42c5c4191d5409e6fab7164a7f2a7b0d4073af3db8a6060ecda31b8e853e8d37e3ceafe8f43f092b8253f00f3435bb80421403d78288a672e5aee764f963617d93f6cfb649224e9688b571eda663fb1ea17f9d34d77c948b2cebc9ed79de", 0xc1, 0xfffffffffffffffa)
r1 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="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", 0x1000, 0xfffffffffffffffa)
keyctl$dh_compute(0x17, &(0x7f0000001200)={r0, r1}, &(0x7f0000001240)=""/70, 0x46, &(0x7f0000001380)={&(0x7f00000012c0)={'hmac(sha1-avx2)\x00'}, &(0x7f0000001300)="b62f89e75f57bf5b986da9a493d8f9af0854efd07f50f7e12b47141197107ef7d03ea775c849130d51f310186d609d1740dac75bf1412d9f0e0a51148751e707a6cfb81d67d9446c588e6d260159282f2ea7357c453bb8536fd961bd57d929c2b9bb91541b9fd2a753c0b3768bbcac32d94f4341", 0x74})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:45 executing program 2:
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r0=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100004018000000ad093fafccb8def8621f3318d1a2a0f105319e148edd0a962163b8152848993cc42777965490aba72c", @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="cd07b72ee58569dfed"])
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000180)={r0, 0x0, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x0, r2}) (async)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r4 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x1}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000000)={0x0, 0x0, r2})

[ 1025.939377][ T5209] Bluetooth: hci1: command 0x041b tx timeout
09:02:45 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:45 executing program 2:
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="0a557cafbcf6d3d1e467af4ad95270e512c63cb54813e4f1c5cfaef09eb1d21718dde474aae140b369de663e794d09dbf7f5b19b386e6c37d2066c3b38a9dcb4e7e154a86e760f079b0814f9425d9ed849ad96b640d5b36a1b9b844ceba7f7fbfc4d1c42c5c4191d5409e6fab7164a7f2a7b0d4073af3db8a6060ecda31b8e853e8d37e3ceafe8f43f092b8253f00f3435bb80421403d78288a672e5aee764f963617d93f6cfb649224e9688b571eda663fb1ea17f9d34d77c948b2cebc9ed79de", 0xc1, 0xfffffffffffffffa)
r1 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="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", 0x1000, 0xfffffffffffffffa)
keyctl$dh_compute(0x17, &(0x7f0000001200)={r0, r1}, &(0x7f0000001240)=""/70, 0x46, &(0x7f0000001380)={&(0x7f00000012c0)={'hmac(sha1-avx2)\x00'}, &(0x7f0000001300)="b62f89e75f57bf5b986da9a493d8f9af0854efd07f50f7e12b47141197107ef7d03ea775c849130d51f310186d609d1740dac75bf1412d9f0e0a51148751e707a6cfb81d67d9446c588e6d260159282f2ea7357c453bb8536fd961bd57d929c2b9bb91541b9fd2a753c0b3768bbcac32d94f4341", 0x74})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="0a557cafbcf6d3d1e467af4ad95270e512c63cb54813e4f1c5cfaef09eb1d21718dde474aae140b369de663e794d09dbf7f5b19b386e6c37d2066c3b38a9dcb4e7e154a86e760f079b0814f9425d9ed849ad96b640d5b36a1b9b844ceba7f7fbfc4d1c42c5c4191d5409e6fab7164a7f2a7b0d4073af3db8a6060ecda31b8e853e8d37e3ceafe8f43f092b8253f00f3435bb80421403d78288a672e5aee764f963617d93f6cfb649224e9688b571eda663fb1ea17f9d34d77c948b2cebc9ed79de", 0xc1, 0xfffffffffffffffa) (async)
add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="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", 0x1000, 0xfffffffffffffffa) (async)
keyctl$dh_compute(0x17, &(0x7f0000001200)={r0, r1}, &(0x7f0000001240)=""/70, 0x46, &(0x7f0000001380)={&(0x7f00000012c0)={'hmac(sha1-avx2)\x00'}, &(0x7f0000001300)="b62f89e75f57bf5b986da9a493d8f9af0854efd07f50f7e12b47141197107ef7d03ea775c849130d51f310186d609d1740dac75bf1412d9f0e0a51148751e707a6cfb81d67d9446c588e6d260159282f2ea7357c453bb8536fd961bd57d929c2b9bb91541b9fd2a753c0b3768bbcac32d94f4341", 0x74}) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)

09:02:45 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0)

09:02:45 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

[ 1026.019089][T23404] chnl_net:caif_netlink_parms(): no params data found
09:02:45 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, 0x0, 0x0, <r1=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r1, 0x0, 0x0, 0x0, 0x1, 0x9})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0xc0189436, &(0x7f0000000540)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, 0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x8, r2, 0x0, 0x8, 0x93, &(0x7f0000000080)="c45f823c3f41c8fd3520cf189f1acdab34fb6bf9c762531e2423771e88970c425df1f0d3242ff6124810f282a9f8faf9f98cb9fa7df5b289e0da31c365baab5ed485a08865e60325ae3ac4f45584677336d549e3eb57b14f52e7e5cb9b4b7ec903b3c5d8b7560954701950fcc10ee03ef4caf869c64fed5f294c104b25b47c28405e7f3c2b549f4b4f1579ee587b5af37e23ed", 0x1})
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:45 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100001, 0x0)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000380))
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000002c0)={<r4=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000300)={r4})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, <r5=>0x0, 0x0, 0x0, 0x0], 0x6})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000180)={0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, <r7=>0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000280)={r5, r6, r7, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})

09:02:45 executing program 3:
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0xd22f2aca}, 0x8)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r0=>0x0})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r1)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x800, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2406000c}, 0x8040)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1)
ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000040)={r0, 0x1})
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r5 = socket(0x15, 0x6, 0xac)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r2, 0x0, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x6b4712ea7b210f9e)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x36be}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000841)
getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:45 executing program 2:
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, 0x0, 0x0, <r1=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r1, 0x0, 0x0, 0x0, 0x1, 0x9}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r1, 0x0, 0x0, 0x0, 0x1, 0x9})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0xc0189436, &(0x7f0000000540)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, 0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x8, r2, 0x0, 0x8, 0x93, &(0x7f0000000080)="c45f823c3f41c8fd3520cf189f1acdab34fb6bf9c762531e2423771e88970c425df1f0d3242ff6124810f282a9f8faf9f98cb9fa7df5b289e0da31c365baab5ed485a08865e60325ae3ac4f45584677336d549e3eb57b14f52e7e5cb9b4b7ec903b3c5d8b7560954701950fcc10ee03ef4caf869c64fed5f294c104b25b47c28405e7f3c2b549f4b4f1579ee587b5af37e23ed", 0x1})
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:45 executing program 3:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100001, 0x0)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000380))
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000002c0)={<r4=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000300)={r4})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, <r5=>0x0, 0x0, 0x0, 0x0], 0x6})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000180)={0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, <r7=>0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000280)={r5, r6, r7, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000280)={r5, r6, r7, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})

09:02:45 executing program 2:
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0xd22f2aca}, 0x8)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r0=>0x0}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r1)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x800, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2406000c}, 0x8040) (async)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1)
ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000040)={r0, 0x1}) (async)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) (async)
r5 = socket(0x15, 0x6, 0xac)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r2, 0x0, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x6b4712ea7b210f9e) (async)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x36be}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000841) (async)
getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:45 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)

09:02:45 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="000000f2a200eeff000000000000"], 0x14}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', <r4=>0x0, 0x29, 0x0, 0x1, 0x80000001, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x8000, 0x1, 0x2000, 0x6}})
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]})
r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x657f2463a7642377, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:45 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

[ 1026.169904][T23404] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1026.173247][T23404] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1026.176594][T23404] bridge_slave_0: entered allmulticast mode
09:02:45 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)

09:02:45 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

[ 1026.192649][T23404] bridge_slave_0: entered promiscuous mode
[ 1026.198282][T23404] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1026.202285][T23404] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1026.205691][T23404] bridge_slave_1: entered allmulticast mode
[ 1026.209754][T23404] bridge_slave_1: entered promiscuous mode
09:02:45 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)

09:02:45 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = gettid()
r3 = syz_clone(0x4000200, &(0x7f0000000f40)="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", 0xb23, 0x0, &(0x7f00000003c0), 0x0)
kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000480)={r1})
r4 = getpid()
kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r1, &(0x7f0000000580))
bind$bt_hci(r1, 0x0, 0x0)
syz_io_uring_setup(0x4045, &(0x7f0000000040)={0x0, 0x3150, 0x10, 0x3, 0x133, 0x0, r1}, &(0x7f00000000c0), &(0x7f0000000100))
connect$bt_sco(r0, &(0x7f0000000000), 0x8)

[ 1026.234836][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
09:02:45 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="000000f2a200eeff000000000000"], 0x14}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', <r4=>0x0, 0x29, 0x0, 0x1, 0x80000001, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x8000, 0x1, 0x2000, 0x6}})
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) (async, rerun: 32)
r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x657f2463a7642377, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

[ 1026.305900][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
09:02:45 executing program 3:
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000000)="93cf7606057c6b9441a71b2b64255af8a51a2d4a096939ae29a1c51c3ae3d7bd58e6c99506be352ab90c922ecfa9c57d7480041aa579f86eb4ae522262436110c1e8151c4a0b4acd88013b3bbd57f1d432b5a11fcbc92183c44e90188112d393bb64e5723f4f5feab679a655d12ee0a8f3c7ea555a797ba1cf1ad070a0716ec0d32fb2ec71695fb8cddf266b7bf4b2e095c49467aa8d27cb")
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

[ 1026.320287][T23404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1026.329256][ T5206] Bluetooth: hci4: command 0x041b tx timeout
[ 1026.332093][T23404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1026.377622][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1026.423957][T23404] team0: Port device team_slave_0 added
[ 1026.429648][T23404] team0: Port device team_slave_1 added
[ 1026.456390][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1026.489594][T23404] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1026.492834][T23404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1026.504607][T23404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1026.510435][T23404] batman_adv: batadv0: Adding interface: batadv_slave_1
09:02:46 executing program 0:
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000000)="93cf7606057c6b9441a71b2b64255af8a51a2d4a096939ae29a1c51c3ae3d7bd58e6c99506be352ab90c922ecfa9c57d7480041aa579f86eb4ae522262436110c1e8151c4a0b4acd88013b3bbd57f1d432b5a11fcbc92183c44e90188112d393bb64e5723f4f5feab679a655d12ee0a8f3c7ea555a797ba1cf1ad070a0716ec0d32fb2ec71695fb8cddf266b7bf4b2e095c49467aa8d27cb")
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:46 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=[<r1=>0x0, 0x0, <r2=>0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, <r3=>0x0]})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000300)={0x3, r1, r3, 0xeeeeeeee})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[<r4=>0x0], &(0x7f00000001c0)=[0x0], 0x3, 0x6, 0x1, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000000)={0x0, 0x0, <r5=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000004c0)={0x0, 0x0, r5})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000240)={0x401, r2, r4})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0xa, 0x3, 0x8, 0x2})

[ 1026.513404][T23404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1026.524739][T23404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
09:02:46 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed}, 0x8)
connect$bt_sco(r0, &(0x7f0000000000), 0x8)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8)

09:02:46 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) (async)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=[<r1=>0x0, 0x0, <r2=>0x0, 0x0]}) (async)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, <r3=>0x0]})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000300)={0x3, r1, r3, 0xeeeeeeee}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[<r4=>0x0], &(0x7f00000001c0)=[0x0], 0x3, 0x6, 0x1, 0x1}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000000)={0x0, 0x0, <r5=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000004c0)={0x0, 0x0, r5}) (async)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000240)={0x401, r2, r4})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0xa, 0x3, 0x8, 0x2})

09:02:46 executing program 0:
r0 = socket(0xb06c5f859260b635, 0xa, 0x1)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x1)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, 0x0, &(0x7f0000000540))

[ 1026.601919][T23404] hsr_slave_0: entered promiscuous mode
[ 1026.606576][T23404] hsr_slave_1: entered promiscuous mode
09:02:46 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={<r1=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000080)={r1, 0x2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:46 executing program 0:
r0 = socket(0xb06c5f859260b635, 0xa, 0x1) (async)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x1)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:46 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={<r1=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000080)={r1, 0x2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) (async)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000080)={r1, 0x2}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) (async)

[ 1026.719440][   T12] bridge_slave_1: left allmulticast mode
09:02:46 executing program 0:
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040))
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

[ 1026.722085][   T12] bridge_slave_1: left promiscuous mode
[ 1026.725115][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1026.731730][   T12] bridge_slave_0: left allmulticast mode
[ 1026.734626][   T12] bridge_slave_0: left promiscuous mode
[ 1026.737510][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
09:02:46 executing program 0:
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040))
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:46 executing program 0:
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040))
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:46 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x2, @link='syz1\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})

09:02:46 executing program 0:
r0 = socket(0x25, 0x1, 0x0)
setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r1)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6erspan0\x00'}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4044081)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r2, 0xa01, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='syz1\x00'}}}}, 0x68}}, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80040}, 0x40000)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r4, &(0x7f0000000000)={0x1f, @none}, 0x8)
connect$bt_sco(r4, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)

[ 1026.895328][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1026.904557][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1026.910951][   T12] bond0 (unregistering): Released all slaves
09:02:46 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x2, @link='syz1\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})

09:02:46 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = gettid()
r3 = syz_clone(0x4000200, &(0x7f0000000f40)="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", 0xb23, 0x0, &(0x7f00000003c0), 0x0) (async)
kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000480)={r1})
r4 = getpid()
kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r1, &(0x7f0000000580)) (async)
bind$bt_hci(r1, 0x0, 0x0) (async)
syz_io_uring_setup(0x4045, &(0x7f0000000040)={0x0, 0x3150, 0x10, 0x3, 0x133, 0x0, r1}, &(0x7f00000000c0), &(0x7f0000000100))
connect$bt_sco(r0, &(0x7f0000000000), 0x8)

[ 1027.303936][   T12] hsr_slave_0: left promiscuous mode
[ 1027.307757][   T12] hsr_slave_1: left promiscuous mode
[ 1027.311882][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1027.316003][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1027.322883][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1027.326497][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1027.336976][   T12] veth1_macvtap: left promiscuous mode
[ 1027.340727][   T12] veth0_macvtap: left promiscuous mode
[ 1027.343492][   T12] veth1_vlan: left promiscuous mode
[ 1027.346119][   T12] veth0_vlan: left promiscuous mode
09:02:47 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
r1 = getpgid(0x0)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, r0, &(0x7f0000000080)={r2, r0, 0xfffffff8})

09:02:47 executing program 3:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed}, 0x8)
connect$bt_sco(r0, &(0x7f0000000000), 0x8)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8)

[ 1027.520376][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 1027.531655][   T12] team0 (unregistering): Port device team_slave_0 removed
09:02:47 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
r1 = getpgid(0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, r0, &(0x7f0000000080)={r2, r0, 0xfffffff8})

09:02:47 executing program 0:
r0 = socket(0x25, 0x1, 0x0)
setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r1)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6erspan0\x00'}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4044081) (async)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r2, 0xa01, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='syz1\x00'}}}}, 0x68}}, 0x0) (async)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80040}, 0x40000)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r4, &(0x7f0000000000)={0x1f, @none}, 0x8) (async)
connect$bt_sco(r4, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)

[ 1027.834060][T23404] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1027.842248][T23404] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1027.848565][T23404] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1027.855275][T23404] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1027.914581][T23404] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1027.934549][T23404] 8021q: adding VLAN 0 to HW filter on device team0
[ 1027.939374][ T5206] Bluetooth: hci2: command tx timeout
[ 1027.951460][ T5471] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1027.954617][ T5471] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1027.958515][ T5471] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1027.961571][ T5471] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1027.998418][T23404] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
09:02:47 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000300)={0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x3, 0x1})
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000001c0))
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x4, 0x4, 0x6})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

[ 1028.010383][T23404] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1028.019285][ T5206] Bluetooth: hci1: command 0x041b tx timeout
09:02:47 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000140)=""/211, &(0x7f0000000100)=0xd3)

09:02:47 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000300)={0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x3, 0x1}) (async)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000001c0)) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x4, 0x4, 0x6})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:47 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000140)=""/211, &(0x7f0000000100)=0xd3)

09:02:47 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x3818c0, 0x0)

[ 1028.178901][T23404] 8021q: adding VLAN 0 to HW filter on device batadv0
09:02:47 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)

[ 1028.236644][T23404] veth0_vlan: entered promiscuous mode
[ 1028.245726][T23404] veth1_vlan: entered promiscuous mode
[ 1028.284515][T23404] veth0_macvtap: entered promiscuous mode
[ 1028.291234][T23404] veth1_macvtap: entered promiscuous mode
[ 1028.305594][T23404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1028.310935][T23404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
09:02:47 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x3818c0, 0x0)

[ 1028.315288][T23404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1028.321914][T23404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1028.326564][T23404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1028.335730][T23404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1028.343354][T23404] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1028.357942][T23404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
09:02:48 executing program 3:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300), 0x8080, 0x0)
epoll_pwait(r0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0xc542, &(0x7f0000000140)={[0xcda4]}, 0x8)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0x541b, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, r0, 0x5, 0x5}, 0x48)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
epoll_wait(r0, &(0x7f0000000400)=[{}, {}], 0x2, 0x2)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000200)={<r3=>0x0})
ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000240)={r3})
connect$bt_sco(r2, &(0x7f0000000680)={0x1f, @fixed}, 0x8)
r4 = getpid()
sched_getattr(r4, &(0x7f0000000180)={0x38}, 0x38, 0x0)
r5 = syz_clone(0x4002000, &(0x7f0000000380)="96dcc957fef64d33255c8073bc003a06a0a879499f767ddfdf834c4ef8b8e4efbd8b597766e77a2f1cabfe73ce9658b4b3568ea67d80eff2026ac54c8b314377b368f2", 0x43, &(0x7f0000000340), &(0x7f00000001c0), &(0x7f0000000280)="1e24b82c3c6d3816")
r6 = epoll_create1(0x80000)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r1, &(0x7f00000002c0)={r6, r1, 0xffff})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000080)={0x1})

[ 1028.363375][T23404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1028.368258][T23404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1028.377498][T23404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1028.384602][T23404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1028.391369][T23404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1028.398191][T23404] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1028.410808][T23404] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1028.414955][T23404] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1028.419036][T23404] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1028.424132][T23404] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1028.497100][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1028.501847][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1028.528536][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1028.532456][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:02:48 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x5421, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:48 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000240), 0x4)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0xc2800, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x129401, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080)={<r3=>0x0})
ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f00000000c0)={r3, 0x1})
r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000200))
ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000180))

09:02:48 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:48 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x5421, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:48 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000240), 0x4) (async)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0xc2800, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) (async)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x129401, 0x0) (async)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080)={<r3=>0x0})
ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f00000000c0)={r3, 0x1})
r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000200)) (async)
ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000180))

09:02:48 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x5421, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:48 executing program 0:
socketpair(0x18, 0x5, 0x9, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x4242, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r3, 0x40305829, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1, r3})
bind$bt_sco(r2, 0x0, 0x0)
connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

09:02:48 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x5421, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:48 executing program 0:
socketpair(0x18, 0x5, 0x9, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x4242, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) (async)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r3, 0x40305829, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1, r3}) (async)
bind$bt_sco(r2, 0x0, 0x0) (async)
connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

09:02:48 executing program 0:
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0x5421, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:48 executing program 0:
syz_io_uring_setup(0x6eb0, &(0x7f0000000040)={0x0, 0xe42f, 0x20, 0x2, 0x3a2}, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_io_uring_setup(0x105d, &(0x7f0000000180)={0x0, 0xcdb8, 0x20, 0x0, 0x2a7}, &(0x7f0000000200), &(0x7f0000000240)=<r1=>0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x200000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x48)
r3 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8)
r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r5, 0x40305828, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r5, 0x11, 0x1, &(0x7f0000000d80)=""/199, &(0x7f0000000e80)=0xc7)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x9, [@enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x81}, {0xc, 0xff}]}, @struct={0xe, 0x8, 0x0, 0x4, 0x1, 0x50000, [{0x0, 0x3, 0x4}, {0x1, 0x5, 0x10001}, {0xc, 0x0, 0x8001}, {0x4, 0x1, 0x1}, {0x1, 0x5, 0x4}, {0x3, 0x0, 0x5}, {0x5, 0x2, 0x9}, {0x9, 0x2, 0xfffffffd}]}]}, {0x0, [0x30, 0xf2, 0x30, 0x30, 0x5f, 0x0, 0x2e]}}, &(0x7f00000002c0)=""/8, 0xa9, 0x8, 0x1, 0x80000001}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r5, 0x287, '\x00', r4, r6, 0x2, 0x4, 0x2}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x4, 0x5, 0x3f, 0x18, 0x1, 0x7, '\x00', r4, 0xffffffffffffffff, 0x4, 0x4, 0x5, 0x4}, 0x48)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', 0x0})
syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_TEE={0x21, 0x1b, 0x0, @fd=r2, 0x0, 0x0, 0x20, 0x6, 0x0, {0x0, 0x0, r7}})
r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x1299c1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:48 executing program 0:
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0x5421, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:48 executing program 0:
syz_io_uring_setup(0x6eb0, &(0x7f0000000040)={0x0, 0xe42f, 0x20, 0x2, 0x3a2}, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000100))
syz_io_uring_setup(0x105d, &(0x7f0000000180)={0x0, 0xcdb8, 0x20, 0x0, 0x2a7}, &(0x7f0000000200), &(0x7f0000000240)=<r1=>0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x200000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x48) (async)
r3 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8)
r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r5, 0x40305828, 0x0) (async)
getsockopt$bt_sco_SCO_OPTIONS(r5, 0x11, 0x1, &(0x7f0000000d80)=""/199, &(0x7f0000000e80)=0xc7) (async)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x9, [@enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x81}, {0xc, 0xff}]}, @struct={0xe, 0x8, 0x0, 0x4, 0x1, 0x50000, [{0x0, 0x3, 0x4}, {0x1, 0x5, 0x10001}, {0xc, 0x0, 0x8001}, {0x4, 0x1, 0x1}, {0x1, 0x5, 0x4}, {0x3, 0x0, 0x5}, {0x5, 0x2, 0x9}, {0x9, 0x2, 0xfffffffd}]}]}, {0x0, [0x30, 0xf2, 0x30, 0x30, 0x5f, 0x0, 0x2e]}}, &(0x7f00000002c0)=""/8, 0xa9, 0x8, 0x1, 0x80000001}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r5, 0x287, '\x00', r4, r6, 0x2, 0x4, 0x2}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x4, 0x5, 0x3f, 0x18, 0x1, 0x7, '\x00', r4, 0xffffffffffffffff, 0x4, 0x4, 0x5, 0x4}, 0x48) (async, rerun: 64)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) (async)
syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_TEE={0x21, 0x1b, 0x0, @fd=r2, 0x0, 0x0, 0x20, 0x6, 0x0, {0x0, 0x0, r7}}) (async, rerun: 32)
r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x1299c1, 0x0) (rerun: 32)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:48 executing program 0:
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0x5421, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:48 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0xf0ffff}, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r1, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x3ff, 0x2}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000004)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x1, 0x6, 0x3, 0x3})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:48 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x5421, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:48 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0xf0ffff}, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r1, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x3ff, 0x2}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000004)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x1, 0x6, 0x3, 0x3})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0xf0ffff}, 0x0) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r1, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x3ff, 0x2}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000004) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x1, 0x6, 0x3, 0x3}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) (async)

09:02:48 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async)

09:02:48 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x5421, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:48 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x10000004})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x1, 0x5, 0x6})
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={<r3=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000100)={r3, 0x2})
r4 = epoll_create(0x7)
kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r0, &(0x7f0000000080)={r4, r0})
r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x1})
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000380)={0x6})
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, &(0x7f0000000280)={r3, 0x1})

09:02:48 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x5421, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:48 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) (async)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) (async)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x10000004})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x1, 0x5, 0x6}) (async, rerun: 32)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={<r3=>0x0}) (rerun: 32)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000100)={r3, 0x2}) (async)
r4 = epoll_create(0x7)
kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r0, &(0x7f0000000080)={r4, r0}) (async)
r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r6 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x1})
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000380)={0x6})
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, &(0x7f0000000280)={r3, 0x1})

09:02:48 executing program 3:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0x5421, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:48 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300), 0x8080, 0x0)
epoll_pwait(r0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0xc542, &(0x7f0000000140)={[0xcda4]}, 0x8) (async)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0x541b, 0x0) (async, rerun: 64)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, r0, 0x5, 0x5}, 0x48) (async, rerun: 64)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
epoll_wait(r0, &(0x7f0000000400)=[{}, {}], 0x2, 0x2) (async)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000200)={<r3=>0x0})
ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000240)={r3}) (async, rerun: 64)
connect$bt_sco(r2, &(0x7f0000000680)={0x1f, @fixed}, 0x8) (async, rerun: 64)
r4 = getpid()
sched_getattr(r4, &(0x7f0000000180)={0x38}, 0x38, 0x0)
r5 = syz_clone(0x4002000, &(0x7f0000000380)="96dcc957fef64d33255c8073bc003a06a0a879499f767ddfdf834c4ef8b8e4efbd8b597766e77a2f1cabfe73ce9658b4b3568ea67d80eff2026ac54c8b314377b368f2", 0x43, &(0x7f0000000340), &(0x7f00000001c0), &(0x7f0000000280)="1e24b82c3c6d3816") (async)
r6 = epoll_create1(0x80000)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r1, &(0x7f00000002c0)={r6, r1, 0xffff}) (async, rerun: 64)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000080)={0x1}) (rerun: 64)

09:02:48 executing program 2:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

09:02:48 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed}, 0x8)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x16})
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1e, 0xd6d8, @l2={'ib', 0x3a, 'team0\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4024810)

09:02:49 executing program 3:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

09:02:49 executing program 1:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0x5421, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:49 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:49 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x44043, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000200)={<r2=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000240)={r2, 0x1})
ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000200)={r2, 0x30})
r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x840, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000002c0)={0x7, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000080)=[0xb22, 0x252], &(0x7f00000000c0)=[0x2], 0x55, 0xa, 0x100, &(0x7f0000000100)=[0x3, 0xd1f, 0xe44, 0x8, 0x2e, 0x2, 0xb5, 0x4000000, 0x800, 0x20153], &(0x7f0000000180)=[0xfff]})

09:02:49 executing program 1:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0x5421, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:49 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x44043, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000200)={<r2=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000240)={r2, 0x1}) (async)
ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000200)={r2, 0x30}) (async)
r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x840, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000002c0)={0x7, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 64)
ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000080)=[0xb22, 0x252], &(0x7f00000000c0)=[0x2], 0x55, 0xa, 0x100, &(0x7f0000000100)=[0x3, 0xd1f, 0xe44, 0x8, 0x2e, 0x2, 0xb5, 0x4000000, 0x800, 0x20153], &(0x7f0000000180)=[0xfff]}) (rerun: 64)

09:02:49 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x5421, 0x0)

09:02:49 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r0)
connect$bt_sco(r0, &(0x7f0000000580), 0x8)
prctl$PR_SET_ENDIAN(0x14, 0x1)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0x40305829, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000002c0)=[0x0, 0x0, 0x0, <r3=>0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x8, 0x4, 0x3})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000540)={0x8})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000004c0)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, <r4=>0x0], &(0x7f0000000480)=[0x0], 0x5, 0x1, 0x2, 0x1})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000500)={0x30f9, r3, r4})

09:02:49 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x5421, 0x0)

09:02:49 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r0)
connect$bt_sco(r0, &(0x7f0000000580), 0x8)
prctl$PR_SET_ENDIAN(0x14, 0x1)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0x40305829, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000002c0)=[0x0, 0x0, 0x0, <r3=>0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x8, 0x4, 0x3})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000540)={0x8})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000004c0)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, <r4=>0x0], &(0x7f0000000480)=[0x0], 0x5, 0x1, 0x2, 0x1})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000500)={0x30f9, r3, r4})
socket(0x10, 0x3, 0x0) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r0) (async)
connect$bt_sco(r0, &(0x7f0000000580), 0x8) (async)
prctl$PR_SET_ENDIAN(0x14, 0x1) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) (async)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0x40305829, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x8, 0x4, 0x3}) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000540)={0x8}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000004c0)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0], 0x5, 0x1, 0x2, 0x1}) (async)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000500)={0x30f9, r3, r4}) (async)

09:02:49 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x5421, 0x0)

09:02:49 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x404200, 0x0)
r1 = syz_io_uring_setup(0x47e8, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0))
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:49 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x5450, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:49 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x404200, 0x0)
r1 = syz_io_uring_setup(0x47e8, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0))
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x404200, 0x0) (async)
syz_io_uring_setup(0x47e8, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) (async)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) (async)

09:02:49 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x5451, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:49 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8923, &(0x7f0000001100)={'syztnl2\x00', 0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private1, @in=@remote}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x1000, 0x0)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x22c080, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f00000000c0)={0x0, 0x0, <r4=>0xffffffffffffffff})
kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, r0, &(0x7f0000000100)={r3, r4, 0x8001})

09:02:49 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x5452, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:49 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8923, &(0x7f0000001100)={'syztnl2\x00', 0x0}) (async)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private1, @in=@remote}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8) (async)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x1000, 0x0) (async)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x22c080, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f00000000c0)={0x0, 0x0, <r4=>0xffffffffffffffff})
kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, r0, &(0x7f0000000100)={r3, r4, 0x8001})

09:02:49 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x5452, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:49 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000), 0x8)

09:02:49 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x5452, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

[ 1030.009316][ T5206] Bluetooth: hci2: command 0x041b tx timeout
09:02:49 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[{}, {}], &(0x7f0000000180)=[0x0, 0x0, 0x0, <r1=>0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x4, 0x2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, <r2=>0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x2, 0x9, 0x6, 0x3})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000400)={0x100, r1, r2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:49 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000), 0x8)

09:02:49 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x5452, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:49 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[{}, {}], &(0x7f0000000180)=[0x0, 0x0, 0x0, <r1=>0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x4, 0x2}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, <r2=>0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x2, 0x9, 0x6, 0x3})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000400)={0x100, r1, r2}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:49 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8)

09:02:49 executing program 1:
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0x5452, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

[ 1030.099343][ T5206] Bluetooth: hci1: command 0x041b tx timeout
09:02:49 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x325080, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x7, 0x8})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x1, 0x1, 0x6})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:49 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8)

09:02:49 executing program 0:
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0x5452, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:49 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x325080, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x7, 0x8}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x1, 0x1, 0x6})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:49 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x5, 0xa, 0x8, 0x2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})

09:02:49 executing program 0:
r0 = socket(0x2, 0xa, 0x40000000)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x800, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40884}, 0x20040006)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r1, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x5054)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1c040804}, 0x4800)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:49 executing program 1:
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0x5452, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:49 executing program 3:
r0 = socket(0x2, 0xa, 0x40000000)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x800, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40884}, 0x20040006)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r1, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x5054) (async)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r1, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x5054)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1c040804}, 0x4800)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:49 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed}, 0x8) (async)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x16}) (async)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1e, 0xd6d8, @l2={'ib', 0x3a, 'team0\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4024810)

09:02:49 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x5452, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:49 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x5, 0xa, 0x8, 0x2}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})

09:02:50 executing program 2:
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x84}, 0x8)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280), 0x482502, 0x0)
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x880)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/time\x00')
r5 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00')
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)

09:02:50 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x5452, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:50 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000), 0x8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:50 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0x9, 0x4)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:50 executing program 3:
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x84}, 0x8) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540)) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) (async)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280), 0x482502, 0x0)
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) (async, rerun: 32)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/time\x00') (async, rerun: 32)
r5 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00')
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)

09:02:50 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x5452, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:50 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0x9, 0x4)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) (async)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0x9, 0x4) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) (async)

09:02:50 executing program 3:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0x5452, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:50 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000540))

09:02:50 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0))
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040))

09:02:50 executing program 2:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0x5452, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:50 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x5460, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:50 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0))
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040))

09:02:50 executing program 3:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0x5452, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:50 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) (async)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r2 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)) (async)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040))

09:02:50 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x8933, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:50 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x5452, 0x0)

09:02:50 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0)

09:02:50 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x8933, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:50 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x5452, 0x0)

09:02:50 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x5452, 0x0)

09:02:50 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x214002, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000100)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl0\x00', r1, 0x4, 0xf4, 0xbe, 0x1000, 0x0, @private1, @loopback, 0x1, 0x700, 0xffed, 0x1}})
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r4=>r0, {r2, r3}}, './file0\x00'})
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040))
ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000480)={0x48, 0x8, r4, 0x0, 0x15, 0xd0, &(0x7f0000000380)="edd0cd61c538df510ea961b12da055903f78524beb42f4db5829bd8077e32e7610dcf7a66e2a935e846854e4b5cdf21cf8382fad5918269679782648b4098eabf1a342431fd728b553eef114efe2f8406f119319090bfa54a41c6d08fb511042450b9fade4f587510017f2c6153e33eda1e888ebe985e30453e80369ef4dce004ff0e9fff5072a76a927ff1e1883b04e7c1a99d841278b83d33e91a9931c0a8d72fa0bff1d6252fb0ef234b3b0635cf2c18deba16642e53666f470b629a5265d0676dbec775030be5a97ab91307384f4"})
r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000080))
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:50 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x400448c9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:50 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x5452, 0x0)

09:02:50 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x214002, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000100)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl0\x00', r1, 0x4, 0xf4, 0xbe, 0x1000, 0x0, @private1, @loopback, 0x1, 0x700, 0xffed, 0x1}}) (async)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r4=>r0, {r2, r3}}, './file0\x00'})
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) (async)
ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000480)={0x48, 0x8, r4, 0x0, 0x15, 0xd0, &(0x7f0000000380)="edd0cd61c538df510ea961b12da055903f78524beb42f4db5829bd8077e32e7610dcf7a66e2a935e846854e4b5cdf21cf8382fad5918269679782648b4098eabf1a342431fd728b553eef114efe2f8406f119319090bfa54a41c6d08fb511042450b9fade4f587510017f2c6153e33eda1e888ebe985e30453e80369ef4dce004ff0e9fff5072a76a927ff1e1883b04e7c1a99d841278b83d33e91a9931c0a8d72fa0bff1d6252fb0ef234b3b0635cf2c18deba16642e53666f470b629a5265d0676dbec775030be5a97ab91307384f4"})
r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000080))
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:50 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x400448dd, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:50 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x400454ca, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:50 executing program 3:
syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff)
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_clone(0x400, &(0x7f00000005c0)="cf7c2ec9e4606e0781b012f3875249ac6d5fa9b3c3bc773266b853aaacf4156e01841d69a5495c677a64547e08c0940769cca6675ef1e5095a2a9401f6aa498f1abd78629e512c068b985f5b871b78a5cf73fbfc30ffd4b70f7814785365ce30b4aa091bbb92ece23fb7bdb6c08427ab29d017525ff0c2dafc536a143b78c1d06f152a8e1b0f0dbe6e3e295571af08229aa4dd8e00eb5f276ae057ce4f96ecdbfe2dec1fd8b05e8f9f6b1e79db2cb119a7b5c29cfd3133fd6406d4f4824f51ef772da0972fb894ff04fd3ae365233b1e62cea9d8bd88d77682c030c85a182c10", 0xe0, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="851d944958d1efdb4a401b60806cdad2968b6f0be2ad13cb2bbfe2e76d78d5c494d83534b5ae321c23726938c8695be3817be67cb46c64b09b6c4842b9221a358f8e263d8352367014d8ef910dbe959811c27a7c4a866323f40f674e281135330a1b8afc49d2e1b2d938e4ca32b48e73d6f015c967c0799d18652c83f710978e8745c52ea47251cca29b566a405b7c50aa99a8d04e83a50622ce0158a9812f63b9d53899fea4a8f514fe7d0abe3030f5b05280")
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080))
r4 = getpid()
kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r3, &(0x7f0000000140)={r3})
r5 = getpgid(r1)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, 0xffffffffffffffff, &(0x7f0000000540)={r0, r0, 0x8})
ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000140)={0x2, 0x800, {<r6=>r1}, {0xee00}, 0x800000000000005, 0x8})
r7 = syz_clone(0x20002080, &(0x7f0000000180)="0b196b5c701252a4d284d74481d63394fe952122703382", 0x17, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)="ee1b537caac44333bd97b392306f20feb748df26145ec6d55a706a07096d91167cefcc86c8cea0144139a5435ff9694fd0bf")
kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r0, &(0x7f00000002c0)={0xffffffffffffffff, r0, 0x6})
r8 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000080))
r9 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r0, &(0x7f0000000200))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0x10000000})
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="080026bd7000fbdbdf251000000005002a000d0000000500350000000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000090}, 0x8000010)

09:02:50 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={<r1=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000080)={r1, 0x2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:50 executing program 1:
syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff)
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_clone(0x400, &(0x7f00000005c0)="cf7c2ec9e4606e0781b012f3875249ac6d5fa9b3c3bc773266b853aaacf4156e01841d69a5495c677a64547e08c0940769cca6675ef1e5095a2a9401f6aa498f1abd78629e512c068b985f5b871b78a5cf73fbfc30ffd4b70f7814785365ce30b4aa091bbb92ece23fb7bdb6c08427ab29d017525ff0c2dafc536a143b78c1d06f152a8e1b0f0dbe6e3e295571af08229aa4dd8e00eb5f276ae057ce4f96ecdbfe2dec1fd8b05e8f9f6b1e79db2cb119a7b5c29cfd3133fd6406d4f4824f51ef772da0972fb894ff04fd3ae365233b1e62cea9d8bd88d77682c030c85a182c10", 0xe0, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="851d944958d1efdb4a401b60806cdad2968b6f0be2ad13cb2bbfe2e76d78d5c494d83534b5ae321c23726938c8695be3817be67cb46c64b09b6c4842b9221a358f8e263d8352367014d8ef910dbe959811c27a7c4a866323f40f674e281135330a1b8afc49d2e1b2d938e4ca32b48e73d6f015c967c0799d18652c83f710978e8745c52ea47251cca29b566a405b7c50aa99a8d04e83a50622ce0158a9812f63b9d53899fea4a8f514fe7d0abe3030f5b05280")
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080))
r4 = getpid()
kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r3, &(0x7f0000000140)={r3})
r5 = getpgid(r1)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, 0xffffffffffffffff, &(0x7f0000000540)={r0, r0, 0x8})
ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000140)={0x2, 0x800, {<r6=>r1}, {0xee00}, 0x800000000000005, 0x8})
r7 = syz_clone(0x20002080, &(0x7f0000000180)="0b196b5c701252a4d284d74481d63394fe952122703382", 0x17, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)="ee1b537caac44333bd97b392306f20feb748df26145ec6d55a706a07096d91167cefcc86c8cea0144139a5435ff9694fd0bf")
kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r0, &(0x7f00000002c0)={0xffffffffffffffff, r0, 0x6})
r8 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000080))
r9 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r0, &(0x7f0000000200))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0x10000000})
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="080026bd7000fbdbdf251000000005002a000d0000000500350000000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000090}, 0x8000010)

09:02:50 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x40049409, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:50 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={<r1=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000080)={r1, 0x2}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:50 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
bind$bt_sco(r0, &(0x7f0000000000), 0x8)

09:02:50 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x40086602, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:50 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000100)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, <r3=>0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000240)={r1, r2, r3, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0]})

09:02:50 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000), 0x8) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:50 executing program 3:
syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff) (async)
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_clone(0x400, &(0x7f00000005c0)="cf7c2ec9e4606e0781b012f3875249ac6d5fa9b3c3bc773266b853aaacf4156e01841d69a5495c677a64547e08c0940769cca6675ef1e5095a2a9401f6aa498f1abd78629e512c068b985f5b871b78a5cf73fbfc30ffd4b70f7814785365ce30b4aa091bbb92ece23fb7bdb6c08427ab29d017525ff0c2dafc536a143b78c1d06f152a8e1b0f0dbe6e3e295571af08229aa4dd8e00eb5f276ae057ce4f96ecdbfe2dec1fd8b05e8f9f6b1e79db2cb119a7b5c29cfd3133fd6406d4f4824f51ef772da0972fb894ff04fd3ae365233b1e62cea9d8bd88d77682c030c85a182c10", 0xe0, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="851d944958d1efdb4a401b60806cdad2968b6f0be2ad13cb2bbfe2e76d78d5c494d83534b5ae321c23726938c8695be3817be67cb46c64b09b6c4842b9221a358f8e263d8352367014d8ef910dbe959811c27a7c4a866323f40f674e281135330a1b8afc49d2e1b2d938e4ca32b48e73d6f015c967c0799d18652c83f710978e8745c52ea47251cca29b566a405b7c50aa99a8d04e83a50622ce0158a9812f63b9d53899fea4a8f514fe7d0abe3030f5b05280")
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080))
r4 = getpid()
kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r3, &(0x7f0000000140)={r3})
r5 = getpgid(r1)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, 0xffffffffffffffff, &(0x7f0000000540)={r0, r0, 0x8}) (async)
ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000140)={0x2, 0x800, {<r6=>r1}, {0xee00}, 0x800000000000005, 0x8}) (async)
r7 = syz_clone(0x20002080, &(0x7f0000000180)="0b196b5c701252a4d284d74481d63394fe952122703382", 0x17, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)="ee1b537caac44333bd97b392306f20feb748df26145ec6d55a706a07096d91167cefcc86c8cea0144139a5435ff9694fd0bf")
kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r0, &(0x7f00000002c0)={0xffffffffffffffff, r0, 0x6}) (async)
r8 = epoll_create(0x1f)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000080))
r9 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r0, &(0x7f0000000200))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)={0x10000000}) (async)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="080026bd7000fbdbdf251000000005002a000d0000000500350000000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000090}, 0x8000010)

09:02:51 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x40086602, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:51 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[<r1=>0x0], 0x1}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000100)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, <r3=>0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000240)={r1, r2, r3, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0]})

09:02:51 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x40087602, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:51 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x40086602, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:51 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x40186366, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:51 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x40086602, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:51 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:51 executing program 0:
syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff)
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x20000010})
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9a, 0x9a, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x5}}, @struct={0x0, 0x2, 0x0, 0x4, 0x1, 0x8000, [{0x3, 0x1, 0x6}, {0x0, 0x1, 0x400}]}, @enum={0xe, 0x1, 0x0, 0x6, 0x4, [{0xe, 0x400}]}, @typedef={0xa}, @func={0xe, 0x0, 0x0, 0xc, 0x2}, @datasec={0xc, 0x3, 0x0, 0xf, 0x2, [{0x3, 0x0, 0xffff81e7}, {0x3, 0x8, 0x4}, {0x1, 0x7, 0xfffffff9}], "05d5"}]}, {0x0, [0x61, 0x61, 0x0, 0x0, 0x2e, 0x30, 0x0]}}, &(0x7f0000000c40)=""/4096, 0xbd, 0x1000, 0x1, 0x1}, 0x20)
getresuid(&(0x7f0000000100), &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000180))
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {r3, r4}}, './file0\x00'})

09:02:51 executing program 3:
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:51 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:51 executing program 0:
rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x80})
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000040)={0x200})
r1 = getpid()
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, <r2=>0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000280)=[<r3=>0x0]})
rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000001680)={0x3f, 0x3838000})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x6, 0x0, &(0x7f0000000300)=[<r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000440)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000600)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[{}], &(0x7f0000000580)=[<r7=>0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x4})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000006c0)={0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000840)={&(0x7f0000000700)=[0x0, 0x0, <r9=>0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[{}], &(0x7f00000007c0)=[0x0, <r10=>0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0], 0x1, 0x3, 0x6})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000a80)={&(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[{}], &(0x7f0000000a00)=[0x0, <r11=>0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x5})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000b40)={0x1, 0x0, &(0x7f0000000b00)=[<r12=>0x0]})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000bc0)={0x1, 0x0, &(0x7f0000000b80)=[<r13=>0x0]})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000ec0)={&(0x7f0000000c00)=[0x0, 0x0], &(0x7f0000000c40)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000e40)=[<r14=>0x0, 0x0, 0x0, 0x0], &(0x7f0000000e80)=[0x0, 0x0, 0x0], 0x7, 0x4, 0x2})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001080)={&(0x7f0000000f40)=[0x0, 0x0], &(0x7f0000000f80)=[{}], &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, <r15=>0x0, 0x0, 0x0, 0x0], &(0x7f0000001040), 0x1, 0x8, 0x2})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001040)={r9})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001380)={&(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[{}, {}, {}, {}, {}, {}], &(0x7f0000001300)=[<r16=>0x0], &(0x7f0000001340)=[0x0, 0x0], 0x6, 0x1, 0xa})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001540)={&(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001440)=[{}], &(0x7f00000014c0)=[<r17=>0x0, 0x0], &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x6})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000001640)={0x101, 0x9, &(0x7f00000008c0)=[r2, r3, r4, r5, 0x0, r6, r7, r8, r10], &(0x7f0000000900)=[0x3], &(0x7f00000015c0)=[0x0, r11, r12, r13, r14, r15, r16, r17], &(0x7f0000001600)=[0xe8c00000000, 0x0, 0x8000000000000000, 0x7fffffff, 0x3f, 0x1, 0xbd]})
ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x1, 0x80000001, {<r18=>0xffffffffffffffff}, {0xee01}, 0x1, 0xf9})
rt_tgsigqueueinfo(r1, r18, 0x14, &(0x7f00000000c0)={0x3f, 0x4, 0xa2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:51 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:51 executing program 0:
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:51 executing program 3:
rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x80})
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000040)={0x200})
r1 = getpid()
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, <r2=>0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000280)=[<r3=>0x0]})
rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000001680)={0x3f, 0x3838000})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x6, 0x0, &(0x7f0000000300)=[<r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000440)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000600)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[{}], &(0x7f0000000580)=[<r7=>0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x4})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000006c0)={0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000840)={&(0x7f0000000700)=[0x0, 0x0, <r9=>0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[{}], &(0x7f00000007c0)=[0x0, <r10=>0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0], 0x1, 0x3, 0x6})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000a80)={&(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[{}], &(0x7f0000000a00)=[0x0, <r11=>0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x5})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000b40)={0x1, 0x0, &(0x7f0000000b00)=[<r12=>0x0]})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000bc0)={0x1, 0x0, &(0x7f0000000b80)=[<r13=>0x0]})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000ec0)={&(0x7f0000000c00)=[0x0, 0x0], &(0x7f0000000c40)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000e40)=[<r14=>0x0, 0x0, 0x0, 0x0], &(0x7f0000000e80)=[0x0, 0x0, 0x0], 0x7, 0x4, 0x2})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001080)={&(0x7f0000000f40)=[0x0, 0x0], &(0x7f0000000f80)=[{}], &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, <r15=>0x0, 0x0, 0x0, 0x0], &(0x7f0000001040), 0x1, 0x8, 0x2})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001040)={r9})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001380)={&(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[{}, {}, {}, {}, {}, {}], &(0x7f0000001300)=[<r16=>0x0], &(0x7f0000001340)=[0x0, 0x0], 0x6, 0x1, 0xa})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001540)={&(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001440)=[{}], &(0x7f00000014c0)=[<r17=>0x0, 0x0], &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x6})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000001640)={0x101, 0x9, &(0x7f00000008c0)=[r2, r3, r4, r5, 0x0, r6, r7, r8, r10], &(0x7f0000000900)=[0x3], &(0x7f00000015c0)=[0x0, r11, r12, r13, r14, r15, r16, r17], &(0x7f0000001600)=[0xe8c00000000, 0x0, 0x8000000000000000, 0x7fffffff, 0x3f, 0x1, 0xbd]})
ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x1, 0x80000001, {<r18=>0xffffffffffffffff}, {0xee01}, 0x1, 0xf9})
rt_tgsigqueueinfo(r1, r18, 0x14, &(0x7f00000000c0)={0x3f, 0x4, 0xa2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:51 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:51 executing program 0:
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:51 executing program 3:
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:51 executing program 0:
rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x80})
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000040)={0x200})
r1 = getpid()
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, <r2=>0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000280)=[<r3=>0x0]})
rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000001680)={0x3f, 0x3838000})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x6, 0x0, &(0x7f0000000300)=[<r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000440)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000600)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[{}], &(0x7f0000000580)=[<r7=>0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x4})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000006c0)={0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000840)={&(0x7f0000000700)=[0x0, 0x0, <r9=>0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[{}], &(0x7f00000007c0)=[0x0, <r10=>0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0], 0x1, 0x3, 0x6})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000a80)={&(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[{}], &(0x7f0000000a00)=[0x0, <r11=>0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x5})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000b40)={0x1, 0x0, &(0x7f0000000b00)=[<r12=>0x0]})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000bc0)={0x1, 0x0, &(0x7f0000000b80)=[<r13=>0x0]})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000ec0)={&(0x7f0000000c00)=[0x0, 0x0], &(0x7f0000000c40)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000e40)=[<r14=>0x0, 0x0, 0x0, 0x0], &(0x7f0000000e80)=[0x0, 0x0, 0x0], 0x7, 0x4, 0x2})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001080)={&(0x7f0000000f40)=[0x0, 0x0], &(0x7f0000000f80)=[{}], &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, <r15=>0x0, 0x0, 0x0, 0x0], &(0x7f0000001040), 0x1, 0x8, 0x2})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001040)={r9})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001380)={&(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[{}, {}, {}, {}, {}, {}], &(0x7f0000001300)=[<r16=>0x0], &(0x7f0000001340)=[0x0, 0x0], 0x6, 0x1, 0xa})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001540)={&(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001440)=[{}], &(0x7f00000014c0)=[<r17=>0x0, 0x0], &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x6})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000001640)={0x101, 0x9, &(0x7f00000008c0)=[r2, r3, r4, r5, 0x0, r6, r7, r8, r10], &(0x7f0000000900)=[0x3], &(0x7f00000015c0)=[0x0, r11, r12, r13, r14, r15, r16, r17], &(0x7f0000001600)=[0xe8c00000000, 0x0, 0x8000000000000000, 0x7fffffff, 0x3f, 0x1, 0xbd]})
ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x1, 0x80000001, {<r18=>0xffffffffffffffff}, {0xee01}, 0x1, 0xf9})
rt_tgsigqueueinfo(r1, r18, 0x14, &(0x7f00000000c0)={0x3f, 0x4, 0xa2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:51 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x40086602, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:51 executing program 0:
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:51 executing program 3:
rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x80}) (async)
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000040)={0x200}) (async)
r1 = getpid()
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, <r2=>0x0], 0x2}) (async)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000280)=[<r3=>0x0]}) (async)
rt_tgsigqueueinfo(r1, r1, 0x37, &(0x7f0000001680)={0x3f, 0x3838000})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x6, 0x0, &(0x7f0000000300)=[<r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0]}) (rerun: 32)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000440)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000600)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[{}], &(0x7f0000000580)=[<r7=>0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x4}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000006c0)={0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000840)={&(0x7f0000000700)=[0x0, 0x0, <r9=>0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[{}], &(0x7f00000007c0)=[0x0, <r10=>0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0], 0x1, 0x3, 0x6})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000a80)={&(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[{}], &(0x7f0000000a00)=[0x0, <r11=>0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x5}) (async)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000b40)={0x1, 0x0, &(0x7f0000000b00)=[<r12=>0x0]}) (async)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000bc0)={0x1, 0x0, &(0x7f0000000b80)=[<r13=>0x0]}) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000ec0)={&(0x7f0000000c00)=[0x0, 0x0], &(0x7f0000000c40)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000e40)=[<r14=>0x0, 0x0, 0x0, 0x0], &(0x7f0000000e80)=[0x0, 0x0, 0x0], 0x7, 0x4, 0x2}) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001080)={&(0x7f0000000f40)=[0x0, 0x0], &(0x7f0000000f80)=[{}], &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, <r15=>0x0, 0x0, 0x0, 0x0], &(0x7f0000001040), 0x1, 0x8, 0x2}) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001040)={r9}) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001380)={&(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[{}, {}, {}, {}, {}, {}], &(0x7f0000001300)=[<r16=>0x0], &(0x7f0000001340)=[0x0, 0x0], 0x6, 0x1, 0xa})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001540)={&(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001440)=[{}], &(0x7f00000014c0)=[<r17=>0x0, 0x0], &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x6})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000001640)={0x101, 0x9, &(0x7f00000008c0)=[r2, r3, r4, r5, 0x0, r6, r7, r8, r10], &(0x7f0000000900)=[0x3], &(0x7f00000015c0)=[0x0, r11, r12, r13, r14, r15, r16, r17], &(0x7f0000001600)=[0xe8c00000000, 0x0, 0x8000000000000000, 0x7fffffff, 0x3f, 0x1, 0xbd]}) (async)
ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x1, 0x80000001, {<r18=>0xffffffffffffffff}, {0xee01}, 0x1, 0xf9})
rt_tgsigqueueinfo(r1, r18, 0x14, &(0x7f00000000c0)={0x3f, 0x4, 0xa2}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:51 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x40086602, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:51 executing program 0:
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:51 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x40086602, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:51 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x200040, 0x0)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000200)={<r3=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000240)={r3, 0x1})
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={<r4=>0x0})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000580))
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000080)={r4})
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000200)={r4})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0xa, 0x9, 0xa})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

[ 1032.109269][ T5213] Bluetooth: hci2: command 0x041b tx timeout
09:02:51 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:51 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
bind$bt_sco(r0, &(0x7f0000000000), 0x8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async)
bind$bt_sco(r0, &(0x7f0000000000), 0x8) (async)

09:02:51 executing program 2:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:51 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x200040, 0x0)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000200)={<r3=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000240)={r3, 0x1})
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={<r4=>0x0})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000580))
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000080)={r4})
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000200)={r4})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0xa, 0x9, 0xa})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:51 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

[ 1032.189569][ T5213] Bluetooth: hci1: command 0x041b tx timeout
09:02:51 executing program 2:
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r0=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000040)={r0, 0x1})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:51 executing program 2:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:51 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x200040, 0x0)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000200)={<r3=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000240)={r3, 0x1}) (async)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000240)={r3, 0x1})
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={<r4=>0x0})
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000580)) (async)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000580))
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000080)={r4}) (async)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000080)={r4})
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000200)={r4})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0xa, 0x9, 0xa})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:51 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:51 executing program 2:
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r0=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000040)={r0, 0x1})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

09:02:52 executing program 0:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:52 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x1, 0x2, 0xa, 0x2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:52 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
r1 = socket(0x11, 0x5, 0x3)
bind$bt_sco(r1, 0x0, 0xffffffffffffff18)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8)

09:02:52 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x40086602, 0x0)

09:02:52 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) (async)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x1, 0x2, 0xa, 0x2}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:52 executing program 1:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:52 executing program 2:
rt_sigsuspend(&(0x7f0000000040), 0x8)
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:52 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x40086602, 0x0)

09:02:52 executing program 1:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:52 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x40086602, 0x0)

09:02:52 executing program 1:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:52 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x4020940d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:52 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x401c5820, 0x0)

09:02:52 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x4020940d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:52 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x401c5820, 0x0)

09:02:52 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x4020940d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:52 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x401c5820, 0x0)

09:02:52 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x4020940d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:52 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x401c5820, 0x0)

09:02:52 executing program 1:
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0x4020940d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:52 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x80086301, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:52 executing program 1:
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0x4020940d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:52 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x80086601, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:52 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x80087601, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:52 executing program 1:
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0x4020940d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:52 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = socket(0x1, 0x3, 0x7fffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'})
connect$bt_sco(r0, &(0x7f0000000680), 0x8)

09:02:52 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x4020940d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:52 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x80111500, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:52 executing program 3:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = socket(0x1, 0x3, 0x7fffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'})
connect$bt_sco(r0, &(0x7f0000000680), 0x8) (async)
connect$bt_sco(r0, &(0x7f0000000680), 0x8)

09:02:52 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x4020940d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:52 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed}, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x400, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xffff, @link='syz0\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4040800}, 0x50)

09:02:52 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x801c581f, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:52 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x4020940d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:52 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x80811501, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:52 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc0045878, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:52 executing program 3:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0x4020940d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:52 executing program 3:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
r1 = socket(0x11, 0x5, 0x3)
bind$bt_sco(r1, 0x0, 0xffffffffffffff18)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8)

09:02:52 executing program 0:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0x4020940d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:53 executing program 2:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0x4020940d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:53 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc0045878, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:53 executing program 0:
rt_sigsuspend(&(0x7f0000000040), 0x8) (async)
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:53 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc0189436, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:53 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x4020940d, 0x0)

09:02:53 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc020660b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:53 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x4020940d, 0x0)

09:02:53 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064d0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:53 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x4020940d, 0x0)

09:02:53 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:53 executing program 2:
syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff) (async)
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x20000010}) (async, rerun: 64)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9a, 0x9a, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x5}}, @struct={0x0, 0x2, 0x0, 0x4, 0x1, 0x8000, [{0x3, 0x1, 0x6}, {0x0, 0x1, 0x400}]}, @enum={0xe, 0x1, 0x0, 0x6, 0x4, [{0xe, 0x400}]}, @typedef={0xa}, @func={0xe, 0x0, 0x0, 0xc, 0x2}, @datasec={0xc, 0x3, 0x0, 0xf, 0x2, [{0x3, 0x0, 0xffff81e7}, {0x3, 0x8, 0x4}, {0x1, 0x7, 0xfffffff9}], "05d5"}]}, {0x0, [0x61, 0x61, 0x0, 0x0, 0x2e, 0x30, 0x0]}}, &(0x7f0000000c40)=""/4096, 0xbd, 0x1000, 0x1, 0x1}, 0x20) (async, rerun: 64)
getresuid(&(0x7f0000000100), &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000180))
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {r3, r4}}, './file0\x00'})

09:02:53 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2})

09:02:53 executing program 2:
syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}]}, 0x2c}, 0x1, 0x0, 0x0, 0x28008000}, 0x0)

09:02:53 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3})

09:02:53 executing program 2:
syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}]}, 0x2c}, 0x1, 0x0, 0x0, 0x28008000}, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) (async)
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}]}, 0x2c}, 0x1, 0x0, 0x0, 0x28008000}, 0x0) (async)

09:02:53 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x4})

09:02:53 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000126bd7000fcdbdf250000000014001f00fe8800000000000000000000000038010500140048000000c190a30628cbcde6ac3a3e9ee4e2af25723836ecd00097e647427628b9bad5b81f455ede921ae227beb065aaa799b52ae84e8b43c9f4857aac6141207666f4a2b0f2be00561afc39dcd95658deb366c2c2be9d7ce17639d4fc4c59605288e40cfc0f18370b103334a9f243eb04c27e9386c8bb5e656757b8c9a5f239b38fa5f0ca4cf3b567bcfe0cc9c4ece3442ff4a0c0f62f373829e9b4321e51d7d7594e564dae174980681683a18d3f561172f0"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x8010)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r3, 0x100, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xfffffff9, 0x0, 0x5, 0x1}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004c}, 0x4040)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r1, 0x10, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x21}}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan1\x00'}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}]}, 0x74}, 0x1, 0x0, 0x0, 0x7bb256e8a6268e94}, 0x8044004)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'})
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r6, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1f}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x40)

09:02:53 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5})

09:02:53 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000126bd7000fcdbdf250000000014001f00fe8800000000000000000000000038010500140048000000c190a30628cbcde6ac3a3e9ee4e2af25723836ecd00097e647427628b9bad5b81f455ede921ae227beb065aaa799b52ae84e8b43c9f4857aac6141207666f4a2b0f2be00561afc39dcd95658deb366c2c2be9d7ce17639d4fc4c59605288e40cfc0f18370b103334a9f243eb04c27e9386c8bb5e656757b8c9a5f239b38fa5f0ca4cf3b567bcfe0cc9c4ece3442ff4a0c0f62f373829e9b4321e51d7d7594e564dae174980681683a18d3f561172f0"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x8010)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r3, 0x100, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xfffffff9, 0x0, 0x5, 0x1}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004c}, 0x4040)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r1, 0x10, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x21}}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan1\x00'}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}]}, 0x74}, 0x1, 0x0, 0x0, 0x7bb256e8a6268e94}, 0x8044004)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'})
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r6, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1f}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x40)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000010c0), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000126bd7000fcdbdf250000000014001f00fe8800000000000000000000000038010500140048000000c190a30628cbcde6ac3a3e9ee4e2af25723836ecd00097e647427628b9bad5b81f455ede921ae227beb065aaa799b52ae84e8b43c9f4857aac6141207666f4a2b0f2be00561afc39dcd95658deb366c2c2be9d7ce17639d4fc4c59605288e40cfc0f18370b103334a9f243eb04c27e9386c8bb5e656757b8c9a5f239b38fa5f0ca4cf3b567bcfe0cc9c4ece3442ff4a0c0f62f373829e9b4321e51d7d7594e564dae174980681683a18d3f561172f0"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x8010) (async)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) (async)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r3, 0x100, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xfffffff9, 0x0, 0x5, 0x1}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004c}, 0x4040) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r1, 0x10, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x21}}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan1\x00'}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}]}, 0x74}, 0x1, 0x0, 0x0, 0x7bb256e8a6268e94}, 0x8044004) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r4) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'}) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r6, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1f}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x40) (async)

09:02:53 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6})

09:02:53 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000002c15fdd9537f3ef8ff00", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000000000000c4100000003001462726f6164636173742d6c696e6b0000"], 0x30}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x7f, @media='udp\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x48804}, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff)

09:02:53 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x7})

09:02:53 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000002c15fdd9537f3ef8ff00", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000000000000c4100000003001462726f6164636173742d6c696e6b0000"], 0x30}}, 0x0) (async)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x7f, @media='udp\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x48804}, 0x0) (async)
syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff)

09:02:53 executing program 1:
syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff)

09:02:53 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed}, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x400, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xffff, @link='syz0\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4040800}, 0x50)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed}, 0x8) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x400, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xffff, @link='syz0\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4040800}, 0x50) (async)

09:02:53 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x300})

09:02:53 executing program 2:
syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x60004011}, 0x4000080)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="28020000", @ANYRESHEX=r3, @ANYRESOCT=r2, @ANYRES64, @ANYRES64=r2, @ANYRESDEC=r5], 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x6000004)
r6 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x891b, &(0x7f0000000000)={'batadv0\x00', <r7=>0x0})
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000006f146c859425ae555db41ddeccf5a30077df3eb54ef9fd330537bff832bbce1777b12975ebc4281ae51d93e64b7d8409614bdae3d2ac8cb5ca2f550a30c03fd09ad0ae5017f104c003967490d5ff", @ANYRES64=r0, @ANYBLOB="20002bbd7000fbdbdf2507000000000300e0000001060005004e210000060001000a0000000500020008000000080007000000000000", @ANYRES32=0x0, @ANYRESHEX=r7], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0xc090)

09:02:53 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x500})

09:02:53 executing program 1:
syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x60004011}, 0x4000080)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="28020000", @ANYRESHEX=r3, @ANYRESOCT=r2, @ANYRES64, @ANYRES64=r2, @ANYRESDEC=r5], 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x6000004)
r6 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x891b, &(0x7f0000000000)={'batadv0\x00', <r7=>0x0})
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000006f146c859425ae555db41ddeccf5a30077df3eb54ef9fd330537bff832bbce1777b12975ebc4281ae51d93e64b7d8409614bdae3d2ac8cb5ca2f550a30c03fd09ad0ae5017f104c003967490d5ff", @ANYRES64=r0, @ANYBLOB="20002bbd7000fbdbdf2507000000000300e0000001060005004e210000060001000a0000000500020008000000080007000000000000", @ANYRES32=0x0, @ANYRESHEX=r7], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0xc090)
syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x60004011}, 0x4000080) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r4) (async)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="28020000", @ANYRESHEX=r3, @ANYRESOCT=r2, @ANYRES64, @ANYRES64=r2, @ANYRESDEC=r5], 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x6000004) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x891b, &(0x7f0000000000)) (async)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000006f146c859425ae555db41ddeccf5a30077df3eb54ef9fd330537bff832bbce1777b12975ebc4281ae51d93e64b7d8409614bdae3d2ac8cb5ca2f550a30c03fd09ad0ae5017f104c003967490d5ff", @ANYRES64=r0, @ANYBLOB="20002bbd7000fbdbdf2507000000000300e0000001060005004e210000060001000a0000000500020008000000080007000000000000", @ANYRES32=0x0, @ANYRESHEX=r7], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0xc090) (async)

09:02:53 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed}, 0x8)

09:02:53 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0)

09:02:53 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x600})

09:02:53 executing program 1:
socketpair(0x1d, 0x5, 0x6, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
connect$bt_sco(r0, &(0x7f00000004c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_TABLE(r1, 0x29, 0xcf, &(0x7f0000000000)=0xfe, 0x4)
setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000400)={{0xa, 0x4e21, 0x9, @loopback, 0xfffffff9}, {0xa, 0x4e23, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd1f}, 0x0, {[0x401, 0x6, 0x5c7, 0xac, 0x7, 0x20, 0x8, 0x1ff]}}, 0x5c)
connect$bt_sco(r0, &(0x7f00000003c0), 0x8)
r2 = syz_io_uring_setup(0x82f, &(0x7f0000000040)={0x0, 0x1e13, 0x4, 0x2, 0x1b4}, &(0x7f0000000280), &(0x7f0000000100))
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @rand_addr=' \x01\x00', 0x0, 0x7}})
syz_io_uring_setup(0x2429, &(0x7f0000000140)={0x0, 0xc72f, 0x80, 0x1, 0x1ee, 0x0, r2}, &(0x7f00000001c0), &(0x7f0000000200))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000480)={0x1f, @none}, 0x8)
syz_io_uring_setup(0x5f23, &(0x7f00000002c0)={0x0, 0x274a, 0x100, 0x2, 0x27, 0x0, r2}, &(0x7f0000000340), &(0x7f0000000380))

[ 1034.169263][ T5213] Bluetooth: hci2: command 0x041b tx timeout
09:02:53 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x700})

[ 1034.181803][ T5209] ==================================================================
[ 1034.185463][ T5209] BUG: KASAN: slab-use-after-free in sco_conn_del+0xb9/0x2d0
[ 1034.189027][ T5209] Write of size 4 at addr ffff8880410eb080 by task kworker/u33:3/5209
[ 1034.192893][ T5209] 
[ 1034.193995][ T5209] CPU: 1 PID: 5209 Comm: kworker/u33:3 Not tainted 6.8.0-syzkaller-11725-g78c3925c048c #0
[ 1034.198532][ T5209] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1034.205036][ T5209] Workqueue: hci2 hci_cmd_sync_work
[ 1034.208432][ T5209] Call Trace:
[ 1034.209969][ T5209]  <TASK>
[ 1034.211492][ T5209]  dump_stack_lvl+0x116/0x1f0
[ 1034.213858][ T5209]  print_report+0xc3/0x620
[ 1034.216163][ T5209]  ? __virt_addr_valid+0x5e/0x580
[ 1034.218706][ T5209]  ? __phys_addr+0xc6/0x150
[ 1034.221338][ T5209]  kasan_report+0xd9/0x110
[ 1034.223814][ T5209]  ? sco_conn_del+0xb9/0x2d0
[ 1034.226275][ T5209]  ? sco_conn_del+0xb9/0x2d0
09:02:53 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3f00})

09:02:53 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async)
syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0) (async)

09:02:53 executing program 3:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)
connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed}, 0x8)

[ 1034.228622][ T5209]  kasan_check_range+0xef/0x1a0
[ 1034.230868][ T5209]  sco_conn_del+0xb9/0x2d0
[ 1034.232633][ T5209]  sco_connect_cfm+0x20e/0xb80
[ 1034.234562][ T5209]  ? __pfx_sco_connect_cfm+0x10/0x10
[ 1034.236718][ T5209]  ? __pfx_lock_release+0x10/0x10
[ 1034.238678][ T5209]  ? __pfx_sco_connect_cfm+0x10/0x10
[ 1034.240721][ T5209]  hci_conn_failed+0x1c3/0x370
[ 1034.242939][ T5209]  hci_abort_conn_sync+0x762/0xb60
[ 1034.245445][ T5209]  ? __pfx_hci_abort_conn_sync+0x10/0x10
[ 1034.247901][ T5209]  ? abort_conn_sync+0x152/0x360
[ 1034.249279][ T5213] Bluetooth: hci1: command 0x041b tx timeout
[ 1034.249884][ T5209]  ? __pfx_lock_release+0x10/0x10
[ 1034.254240][ T5209]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1034.256534][ T5209]  abort_conn_sync+0x197/0x360
[ 1034.258589][ T5209]  hci_cmd_sync_work+0x1a4/0x410
[ 1034.260902][ T5209]  process_one_work+0x9a9/0x1ac0
[ 1034.263267][ T5209]  ? __pfx_lock_acquire+0x10/0x10
[ 1034.265543][ T5209]  ? __pfx_process_one_work+0x10/0x10
[ 1034.268591][ T5209]  ? assign_work+0x1a0/0x250
[ 1034.271416][ T5209]  worker_thread+0x6c8/0xf70
[ 1034.274186][ T5209]  ? __kthread_parkme+0x148/0x220
[ 1034.276469][ T5209]  ? __pfx_worker_thread+0x10/0x10
[ 1034.278739][ T5209]  kthread+0x2c1/0x3a0
[ 1034.280579][ T5209]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1034.282872][ T5209]  ? __pfx_kthread+0x10/0x10
[ 1034.284901][ T5209]  ret_from_fork+0x45/0x80
[ 1034.286674][ T5209]  ? __pfx_kthread+0x10/0x10
[ 1034.288821][ T5209]  ret_from_fork_asm+0x1a/0x30
[ 1034.290597][T24103] tipc: Enabling of bearer <ib:dvmrp1> rejected, failed to enable media
[ 1034.290766][ T5209]  </TASK>
[ 1034.296569][ T5209] 
[ 1034.297668][ T5209] Allocated by task 24033:
[ 1034.299647][ T5209]  kasan_save_stack+0x33/0x60
[ 1034.301702][ T5209]  kasan_save_track+0x14/0x30
[ 1034.303783][ T5209]  __kasan_kmalloc+0xaa/0xb0
[ 1034.305918][ T5209]  btf_new_fd+0x23f/0x2dd0
[ 1034.308224][ T5209]  __sys_bpf+0x12c0/0x4b40
[ 1034.310799][ T5209]  __x64_sys_bpf+0x78/0xc0
[ 1034.312987][ T5209]  do_syscall_64+0xd2/0x260
[ 1034.315004][ T5209]  entry_SYSCALL_64_after_hwframe+0x6d/0x75
[ 1034.317694][ T5209] 
[ 1034.318779][ T5209] Freed by task 24033:
[ 1034.320536][ T5209]  kasan_save_stack+0x33/0x60
[ 1034.322822][ T5209]  kasan_save_track+0x14/0x30
[ 1034.325191][ T5209]  kasan_save_free_info+0x3b/0x60
[ 1034.327712][ T5209]  __kasan_slab_free+0x11d/0x1a0
[ 1034.330088][ T5209]  kfree+0x129/0x390
[ 1034.331815][ T5209]  btf_new_fd+0x665/0x2dd0
[ 1034.333868][ T5209]  __sys_bpf+0x12c0/0x4b40
[ 1034.335876][ T5209]  __x64_sys_bpf+0x78/0xc0
[ 1034.338057][ T5209]  do_syscall_64+0xd2/0x260
[ 1034.340417][ T5209]  entry_SYSCALL_64_after_hwframe+0x6d/0x75
[ 1034.343387][ T5209] 
[ 1034.344548][ T5209] The buggy address belongs to the object at ffff8880410eb000
[ 1034.344548][ T5209]  which belongs to the cache kmalloc-2k of size 2048
[ 1034.350743][ T5209] The buggy address is located 128 bytes inside of
[ 1034.350743][ T5209]  freed 2048-byte region [ffff8880410eb000, ffff8880410eb800)
[ 1034.357987][ T5209] 
09:02:53 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x197fc0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:53 executing program 0:
syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'dvmrp1\x00'}}}}}, 0x34}}, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0)

09:02:53 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1000000})

09:02:53 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x197fc0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:54 executing program 2:
syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'dvmrp1\x00'}}}}}, 0x34}}, 0x0) (async)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0)

09:02:54 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2000000})

[ 1034.359251][ T5209] The buggy address belongs to the physical page:
[ 1034.361961][ T5209] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x410e8
[ 1034.365628][ T5209] head: order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1034.369005][ T5209] flags: 0xfff80000000840(slab|head|node=0|zone=1|lastcpupid=0xfff)
[ 1034.372523][ T5209] page_type: 0xffffffff()
[ 1034.374468][ T5209] raw: 00fff80000000840 ffff888015042f00 dead000000000100 dead000000000122
[ 1034.379842][ T5209] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
[ 1034.384633][ T5209] head: 00fff80000000840 ffff888015042f00 dead000000000100 dead000000000122
[ 1034.388508][ T5209] head: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
[ 1034.392395][ T5209] head: 00fff80000000003 ffffea0001043a01 dead000000000122 00000000ffffffff
[ 1034.392874][T24113] tipc: Enabling of bearer <ib:dvmrp1> rejected, failed to enable media
[ 1034.396555][ T5209] head: 0000000800000000 0000000000000000 00000000ffffffff 0000000000000000
[ 1034.396570][ T5209] page dumped because: kasan: bad access detected
[ 1034.396579][ T5209] page_owner tracks the page as allocated
[ 1034.396585][ T5209] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5204, tgid 5204 (syz-executor.0), ts 47635989628, free_ts 0
[ 1034.396614][ T5209]  post_alloc_hook+0x2d4/0x350
[ 1034.420838][ T5209]  get_page_from_freelist+0xa28/0x3780
[ 1034.423216][ T5209]  __alloc_pages+0x22b/0x2460
[ 1034.425279][ T5209]  new_slab+0xcc/0x3a0
[ 1034.426967][ T5209]  ___slab_alloc+0x66d/0x1790
[ 1034.428789][ T5209]  __slab_alloc.constprop.0+0x56/0xb0
[ 1034.431187][ T5209]  kmalloc_trace+0x2fb/0x330
[ 1034.433233][ T5209]  rtnl_newlink+0x49/0xa0
[ 1034.435135][ T5209]  rtnetlink_rcv_msg+0x3c7/0xe60
[ 1034.437302][ T5209]  netlink_rcv_skb+0x16b/0x440
[ 1034.439396][ T5209]  netlink_unicast+0x542/0x820
[ 1034.441488][ T5209]  netlink_sendmsg+0x8b8/0xd70
[ 1034.443580][ T5209]  __sys_sendto+0x47f/0x4e0
[ 1034.445525][ T5209]  __x64_sys_sendto+0xe0/0x1c0
[ 1034.447581][ T5209]  do_syscall_64+0xd2/0x260
[ 1034.449565][ T5209]  entry_SYSCALL_64_after_hwframe+0x6d/0x75
[ 1034.452145][ T5209] page_owner free stack trace missing
[ 1034.454441][ T5209] 
[ 1034.455483][ T5209] Memory state around the buggy address:
[ 1034.457905][ T5209]  ffff8880410eaf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1034.461353][ T5209]  ffff8880410eb000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1034.464790][ T5209] >ffff8880410eb080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1034.468237][ T5209]                    ^
[ 1034.470057][ T5209]  ffff8880410eb100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1034.473479][ T5209]  ffff8880410eb180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1034.476902][ T5209] ==================================================================
[ 1034.481526][ T5209] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1034.484685][ T5209] CPU: 1 PID: 5209 Comm: kworker/u33:3 Not tainted 6.8.0-syzkaller-11725-g78c3925c048c #0
[ 1034.488919][ T5209] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1034.493301][ T5209] Workqueue: hci2 hci_cmd_sync_work
[ 1034.495570][ T5209] Call Trace:
[ 1034.497043][ T5209]  <TASK>
[ 1034.498329][ T5209]  dump_stack_lvl+0x3d/0x1f0
[ 1034.500376][ T5209]  panic+0x6f5/0x7a0
[ 1034.502115][ T5209]  ? mark_held_locks+0x9f/0xe0
[ 1034.504202][ T5209]  ? __pfx_panic+0x10/0x10
[ 1034.506147][ T5209]  ? irqentry_exit+0x3b/0x90
[ 1034.508148][ T5209]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1034.510426][ T5209]  ? check_panic_on_warn+0x1f/0xb0
[ 1034.512649][ T5209]  check_panic_on_warn+0xab/0xb0
[ 1034.514797][ T5209]  end_report+0x117/0x180
[ 1034.516670][ T5209]  kasan_report+0xe9/0x110
[ 1034.518606][ T5209]  ? sco_conn_del+0xb9/0x2d0
[ 1034.520627][ T5209]  ? sco_conn_del+0xb9/0x2d0
[ 1034.522604][ T5209]  kasan_check_range+0xef/0x1a0
[ 1034.524740][ T5209]  sco_conn_del+0xb9/0x2d0
[ 1034.526687][ T5209]  sco_connect_cfm+0x20e/0xb80
[ 1034.528769][ T5209]  ? __pfx_sco_connect_cfm+0x10/0x10
09:02:54 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

09:02:54 executing program 2:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3000000})

[ 1034.531031][ T5209]  ? __pfx_lock_release+0x10/0x10
[ 1034.533352][ T5209]  ? __pfx_sco_connect_cfm+0x10/0x10
[ 1034.535635][ T5209]  hci_conn_failed+0x1c3/0x370
[ 1034.537756][ T5209]  hci_abort_conn_sync+0x762/0xb60
[ 1034.539989][ T5209]  ? __pfx_hci_abort_conn_sync+0x10/0x10
[ 1034.542428][ T5209]  ? abort_conn_sync+0x152/0x360
[ 1034.544566][ T5209]  ? __pfx_lock_release+0x10/0x10
[ 1034.546751][ T5209]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1034.549338][ T5209]  abort_conn_sync+0x197/0x360
[ 1034.551425][ T5209]  hci_cmd_sync_work+0x1a4/0x410
[ 1034.553590][ T5209]  process_one_work+0x9a9/0x1ac0
[ 1034.555739][ T5209]  ? __pfx_lock_acquire+0x10/0x10
[ 1034.557935][ T5209]  ? __pfx_process_one_work+0x10/0x10
[ 1034.560272][ T5209]  ? assign_work+0x1a0/0x250
[ 1034.562147][ T5209]  worker_thread+0x6c8/0xf70
[ 1034.564130][ T5209]  ? __kthread_parkme+0x148/0x220
[ 1034.566219][ T5209]  ? __pfx_worker_thread+0x10/0x10
[ 1034.568448][ T5209]  kthread+0x2c1/0x3a0
[ 1034.570247][ T5209]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1034.572541][ T5209]  ? __pfx_kthread+0x10/0x10
[ 1034.574555][ T5209]  ret_from_fork+0x45/0x80
[ 1034.576499][ T5209]  ? __pfx_kthread+0x10/0x10
[ 1034.578515][ T5209]  ret_from_fork_asm+0x1a/0x30
[ 1034.580591][ T5209]  </TASK>
[ 1034.582675][ T5209] Kernel Offset: disabled
[ 1034.584552][ T5209] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:02:54  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffffff8fd05070 RCX=ffffffff813cbbf4 RDX=ffff888024e9c880
RSI=ffffffff813cf139 RDI=0000000000000006 RBP=ffffffff8fd05070 RSP=ffffc9000866f7c0
R8 =0000000000000006 R9 =ffffffff813cf139 R10=ffffffff813cedc1 R11=0000000000000001
R12=ffffffff813cf139 R13=ffffffff813cedc1 R14=dffffc0000000000 R15=ffffffff8fd05070
RIP=ffffffff818d67a1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555558d96480 ffffffff 00c00000
GS =0000 ffff88806b200000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5f50d79198 CR3=00000000218e2000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000f8102000 Opmask01=0000000000000000 Opmask02=00000000ffffbfef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff11b66dd0 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f50cc9da6
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f50cc9db3
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f50cc9dad
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f50cc9dc1
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f50cc9e47
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f50cc9f25
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 0000000000000020
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff84f7cc45 RDI=ffffffff94b6e660 RBP=ffffffff94b6e620 RSP=ffffc900033d7428
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6572617764726148
R12=0000000000000000 R13=0000000000000030 R14=ffffffff84f7cbe0 R15=0000000000000000
RIP=ffffffff84f7cc6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806b300000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb3498d66e4 CR3=000000005c0d4000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffbfef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb6cb9230 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb348cc9da6
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb348cc9db3
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb348cc9dad
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb348cc9dc1
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb348cc9e47
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb348cc9f25
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000080000001 RBX=ffffc90006f1f4c0 RCX=ffffffff813cbbf4 RDX=ffff8880413c4880
RSI=ffffffff813cca0d RDI=0000000000000006 RBP=0000000000000001 RSP=ffffc90006f1f438
R8 =0000000000000006 R9 =ffffffff8154e3c5 R10=ffffffff8154d7aa R11=0000000000000001
R12=ffffffff904ea75c R13=ffffffff904ea75c R14=0000000000011bde R15=ffffc90006f1f4f5
RIP=ffffffff818d6e9d RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806b400000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8a552d66e4 CR3=000000002f128000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffbfef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe8d649610 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35fb6c9da6
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35fb6c9db3
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35fb6c9dad
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35fb6c9dc1
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35fb6c9e47
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35fb6c9f25
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000001 RBX=ffff88802f641780 RCX=ffffffff81ffd819 RDX=ffff888042284880
RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc90006a1fe10
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000002
R12=ffff88802f641780 R13=1ffff92000d43fcd R14=ffff88801fa95500 R15=0000000000000000
RIP=ffffffff818d67a1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556a9a4480 ffffffff 00c00000
GS =0000 ffff88806b500000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8a54702543 CR3=000000004b5f8000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000c0000003 Opmask01=0000000000000000 Opmask02=00000000ffffbfef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000a60ce07b 00000000cec3662e
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0baad7b82d5f788a
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8a546c9da6
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8a546c9db3
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8a546c9dad
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8a546c9dc1
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8a546c9e47
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8a546c9f25
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 250073657479625f 6e695f74696d696c 5f74666f732e7972 6f6d656d2f732500
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005640515c475f 4b4c5f514c484c49 5f51434a560b5c57 4a4840480a560000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000